ACS‐HCA: An Access Control Scheme Under Hierarchical Cryptography Architecture. Issue 1 (1st January 2019)

• Record Type: Journal Article
• Authors: Shi, Jiaoli; Huang, Chuanhe; He, Kai; Shen, Xieyang
• Is Part Of: Chinese journal of electronics. Volume 28:Issue 1(2019)
• Page Start: 52
• Page End: 61
• Publication Date: 2019-01-01
• Subjects: Cloud storage -- Access control -- Ciphertext‐policy attribute‐based encryption -- Hierarchical cryptography architecture -- Attribute revocation; authorisation -- cloud computing -- cryptography; access policies -- hierarchical cryptography architecture -- forward derivation function -- all‐or‐nothing transform -- user private keys -- attribute revocation -- key derivation mechanism -- symmetric keys -- cloud storage system -- data access control -- Ciphertext‐policy attribute‐based encryption -- ACS‐HCA; Electronics -- Periodicals; Electronics -- China -- Periodicals; Electronics; China; Periodicals; 621.38105
• DOI: 10.1049/cje.2018.10.002
• Languages: English
• ISSNs: 1022-4653

Abstract

Abstract : Binding access policies to data, Ciphertext‐policy attribute‐based encryption (CP‐ABE) enables data access control to be independent from a certain application and lets users face data directly. It is regarded as one of the most suitable access control methods in cloud storage system and gets the attention of extensive researches. In those researches, Hierarchical cryptography architecture (HCA) is often applied to improve the efficiency of the system. There exist two open issues: illegal leakage of symmetric keys and low efficiency of revocation of an attribute of a user. We propose an Access control scheme under Hierarchical cryptography architecture (ACS‐HCA). In this scheme, key derivation mechanism and forward derivation function are used to avoid the leakage of symmetric keys, All‐or‐Nothing transform is used to prevent the illegal reuse of symmetric keys, and attribute revocation is realized without re‐issuing other users' private keys. Analyses and simulations demonstrate that our scheme sustains less encrypting cost on each owner and less decrypting cost on each user, but gain high efficiency in revocation of an attribute of a user.