Light weight and fine‐grained access mechanism for secure access to outsourced data*. (14th August 2018)

• Record Type: Journal Article
• Authors: Jahan, Mosarrat; Seneviratne, Suranga; Roy, Partha Sarathi; Sakurai, Kouichi; Seneviratne, Aruna; Jha, Sanjay
• Other Names: Chen Jinjun guestEditor.; Zheng Xianghan guestEditor.; Rong Chunming guestEditor.; Badarch Tuyatsetseg guestEditor.; Nanda Priyadarsi guestEditor.; Puthal Deepak guestEditor.; Mohanty Saraju P. guestEditor.
• Is Part Of: Concurrency and computation. Volume 31:Number 23(2019)
• Page Start: n/a
• Page End: n/a
• Publication Date: 2018-08-14
• Subjects: access controls, security and privacy -- attribute‐based encryption -- mobile computing; Parallel processing (Electronic computers) -- Periodicals; Parallel computers -- Periodicals; 004.35
• DOI: 10.1002/cpe.4736
• Languages: English
• ISSNs: 1532-0626

Abstract

Summary: In this paper, we explore the problem of providing selective read/write access to the outsourced data for clients using mobile devices in an environment that supports users from multiple domains and where attributes are generated by multiple authorities. We consider Ciphertext‐Policy Attribute‐based Encryption (CP‐ABE) scheme as it can provide access control on encrypted outsourced data. One limitation of CP‐ABE is that the users can modify the access policy specified by the data owner if write operations are introduced in the scheme. We propose a protocol for providing different levels of access to outsourced data that permits the authorized users to perform write operation without altering the access policy specified by the data owner. Our scheme provides fine‐grained read/write access to the users, accompanied with a light weight signature scheme and computationally inexpensive user revocation mechanism suitable for resource‐constrained mobile devices. We provide a theoretical analysis of the security of the proposed protocol and the experimental results measured from a real‐world testbed.