A Mixed Attributes-based Multi-authority Cloud Access Scheme

doi:10.3969/j.issn.1671-1122.2016.11.002

Abstract

Abstract:

The mode of outsourcing brings about new challenges for data security and access control in cloud computing, a multi-authority cloud access scheme with mixed access structure is put forward. After adding owner-defined permission attribute to traditional access structure, owner can decide which user has the right to access data and prevent attribute authority from peeking. User’s attribute and direct revocation methods can provide real-time privilege updating in multi-authority system, the former adopts proxy re-encryption to reduce the computing cost of data owner. Analysis shows that our proposed scheme is secure for protecting stored data under existing security models and highly efficient in attribute revocation, which is suitable for multi-authority cloud.

Key words: cloud computing, ABE, multi-authority, attribute revocation

CLC Number:

TP309

Xing RONG, Rong JIANG. A Mixed Attributes-based Multi-authority Cloud Access Scheme[J]. Netinfo Security, 2016, 16(11): 6-6.

Figures/Tables 4

References 11

[1]	赵洋,包文意,熊虎,等. 云计算里一种陷门无法识别的公钥搜索加密方案[J]. 信息网络安全,2016(1):1-5.
[2]	SAHAi A, WATERS B.Fuzzy Identity-Based Encryption[C] //Springer.The International Association for Cryptologic Research, Annual International Conference on the Theory and Applications of Cryptographic Techniques, May 22 - 26, 2005, Aarhus, Denmark . Heidelberg: Springer-Verlag Berlin, 2005: 457-473.
[3]	GOYAL V, PANDEY O, SAHAI A, et al.Attribute-based Encryption for Fine-grained Access Control of Encrypted Data[C] //. ACM.13th ACM Conference on Computer and Communications Security, October, 2006, Alexandria, VA, USA. New York: ACM,2006 : 89-98.
[4]	WANG Q, WANG C, Li J, et al.Enabling Public Verifiability and Data Dynamics for Storage Security in Cloud Computing[C] // Springer.Telecom Bretagne, European Symposium on Research in Computer Security, September 21-23 ,2009, Saint Malo, France. Heidelberg: Springer-Verlag Berlin, 2009: 355-370.
[5]	EISSA T, CHO G H.A Fine Grained Access Control and Flexible Revocation Scheme for Data Security on Public Cloud Storage Services[C] // ICCCTAM.Birla Institute Of Technology & Science, Pilani, International Conference on Cloud Computing Technologies, Applications and Management (ICCCTAM), December 8-10,2012, Dubai, United Arab Emirates. Dubai: IEEE, 2012: 27-33.
[6]	张柄虹, 张串绒, 焦和平,等. 一种属性可撤销的安全云存储模型[J]. 计算机科学, 2015, 42(7):210-215.
[7]	CHASE M.Multi-authority Attribute Based Encryption[C] // Springer.International Association for Cryptologic Research, Theory of Cryptography Conference. February 21-24, 2007, Amsterdam, The Netherlands. Heidelberg: Springer-Verlag Berlin, 2007: 515-534.
[8]	CHASE M, CHOW S S M. Improving Privacy and Security in Multi-authority Attribute-based Encryption[C] // ACM SIGSAC .16th ACM conference on Computer and communications security, November 9-13, 2009, Chicago,USA. New York: ACM, 2009: 121-130.
[9]	YANG K, JIA X.Attributed-based Access Control for Multi-authority Systems in Cloud Storage[C] // IEEE.2012 IEEE 32nd International Conference on Distributed Computing Systems, June 18- 21, 2012, Macau, China. Newyork: IEEE, 2012:536-545.
[10]	YANG M, LIU F, HAN J L, et al.An Efficient Attribute Based Encryption Scheme with Revocation for Outsourced Data Sharing Control[C] // IEEE, 2011 First International Conference on Instrumentation, Measurement, Computer, Communication and Control, October 21-23, 2011, Beijing, China. Newyork: IEEE, 2011: 516-520.
[11]	程思嘉,张昌宏,潘帅卿. 基于CP-ABE算法的云存储数据访问控制方案设计[J]. 信息网络安全,2016(2):1-6.

[1]	Yuan LIU, Wei QIAO. Research and Optimization of Container Network Based on Kubernetes Cluster System in Cloud Environment [J]. Netinfo Security, 2020, 20(3): 36-44.
[2]	Peng LIU, Qian HE, Wangyang LIU, Xu CHENG. CP-ABE Scheme Supporting Attribute Revocation and Outsourcing Decryption [J]. Netinfo Security, 2020, 20(3): 90-97.
[3]	Shengwei XU, Feijie WANG. Attribute-based Encryption Scheme Traced Under Multi-authority [J]. Netinfo Security, 2020, 20(1): 33-39.
[4]	Jiameng BAI, Yingshuai KOU, Zeyi LIU, Daren ZHA. Docker-based RBAC Task Management System [J]. Netinfo Security, 2020, 20(1): 75-82.
[5]	Liangqin REN, Wei WANG, Qiongxiao WANG, Linli LU. A New Cloud Cryptographic Computing Platform Architecture and Implementation [J]. Netinfo Security, 2019, 19(9): 91-95.
[6]	Yi YU, Liangshuang LV, Xiaojian LI, Tianbo WANG. Dynamic Network Topology Description Language for Mobile Cloud Computing Scenario [J]. Netinfo Security, 2019, 19(9): 120-124.
[7]	Zixuan WANG, Liangshuang LV, Xiaojian LI, Tianbo WANG. A Shared Storage-based Virtual Machine Application Distribution Strategy for OpenStack [J]. Netinfo Security, 2019, 19(9): 125-129.
[8]	Yanpeng CUI, Luming FENG, Zheng YAN, Huaqing LIN. Research on Software Security Model of Cloud Computing Based on Program Slicing Technology [J]. Netinfo Security, 2019, 19(7): 31-41.
[9]	Xinrui GE, Wei CUI, Rong HAO, Jia YU. Verifiable Keywords Ranked Search Scheme over Encrypted Cloud Data [J]. Netinfo Security, 2019, 19(7): 82-89.
[10]	Chunqi TIAN, Jing LI, Wei WANG, Liqing ZHANG. A Method for Improving the Performance of Spark on Container Cluster Based on Machine Learning [J]. Netinfo Security, 2019, 19(4): 11-19.
[11]	Pu ZHAO, Wei CUI, Rong HAO, Jia YU. A Secure Outsourcing Computation Scheme for El-Gamal Signature Generation [J]. Netinfo Security, 2019, 19(3): 81-86.
[12]	Zhenfeng ZHANG, Zhiwen ZHANG, Ruichao WANG. Model of Cloud Computing Security and Compliance Capability for Classified Protection of Cybersecurity 2.0 [J]. Netinfo Security, 2019, 19(11): 1-7.
[13]	Xinyang FENG, Jianjing SHEN. A Yarn and NMF Based Big Data Clustering Algorithm [J]. Netinfo Security, 2018, 18(8): 43-49.
[14]	Yuan TAO, Tao HUANG, Mohan ZHANG, Shuilin LI. Research and Development Trend Analysis of Key Technologies for Cyberspace Security Situation Awareness [J]. Netinfo Security, 2018, 18(8): 79-85.
[15]	Qi ZHANG, Xijun LIN, Haipeng QU. Identity-based Encryption Scheme Support Authorization Equality Test in Cloud Environment [J]. Netinfo Security, 2018, 18(6): 52-60.