A Scalable Attribute-Based Access Control Scheme with Flexible Delegation cum Sharing of Access Privileges for Cloud Storage

Ahuja, Rohit; Mohanty, Sraban Kumar

doi:10.1109/tcc.2017.2751471

Cited by 41 publications

(16 citation statements)

References 26 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…For supporting multi‐privilege access control, Li 18 generated shared information based on different patients' access policies. Access privilege delegation is another flexible access control mechanism 19 . Ahuja et al 19 employed hierarchical structure of users to delegate the access privilege.…”

Section: Related Workmentioning

confidence: 99%

“…Access privilege delegation is another flexible access control mechanism 19 . Ahuja et al 19 employed hierarchical structure of users to delegate the access privilege. In most researches, computationally intensive cryptographic algorithms are adopted for access control mechanisms at cloud servers, rarely supporting dynamic membership management.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

Lightweight and fine‐grained access control for cloud–fog‐based electronic medical record sharing systems

Zhang

Wang

Zhu

et al. 2021

Int J Communication

View full text Add to dashboard Cite

Summary The electronic medical record (EMR) sharing systems promote medical services' efficiency, save human resources, and reduce energy consumption. A number of patients are ready to store their medical records in cloud. Nevertheless, owing to the medical record's privacy sensitivity, security problems are of critical importance in EMR sharing systems. This work presents a lightweight and fine‐grained access control with data security for EMR sharing by combining fog and cloud using symmetric encryption algorithm and attribute‐based encryption algorithm. Data owners encrypt the medical records with symmetric encryption and store them in cloud. The symmetric key is protected by ciphertext‐policy attribute‐based encryption and stored in fog. The keyword extracted from medical record is encrypted by data owner with key‐policy attribute‐based keyword search encryption and sent to fog. The requesters who satisfy with the keyword ciphertext's access policy can search for the keyword. They are capable of accessing the symmetric key if their attributes satisfy with the symmetric key ciphertext's access policy. The key management method and access control scheme guarantee the medical record's security and privacy. Security analysis demonstrates that our work is able to achieve privacy protection, secure search, fine‐grained access control, and collusion resistance.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

Lightweight and fine‐grained access control for cloud–fog‐based electronic medical record sharing systems

Zhang

Wang

Zhu

et al. 2021

Int J Communication

View full text Add to dashboard Cite

show abstract

“…It also generates attribute group information which is used by the cloud for ciphertext re-encryption. Similar to the assumptions in [31], [32], we assume the TA is always online.…”

Section: Depicted Inmentioning

confidence: 99%

Efficient and Expressive Access Control With Revocation for Privacy of PHR Based on OBDD Access Structure

2020

View full text Add to dashboard Cite

With the advancement of information and communication technology (ICT), the medical sector is undergoing a massive transformation. Health records are being digitized, stored remotely in the cloud and shared with different stakeholders. However, the use of the cloud for personal health record (PHR) storage presents data security and privacy challenges. Ciphertext-policy attribute-based encryption (CP-ABE) is being widely studied for fine-grained access control of PHRs in the cloud. Expressiveness, efficiency and attribute revocation, among others, are some key requirements of a cloud based health systems. But, many of the proposed CP-ABE schemes rely on access structures that are either restrictive or cumbersome and thus result in less expressive and efficient schemes. Many of the schemes also lack mechanisms for efficient and immediate attribute/user revocation. In this work, we propose an expressive and efficient access control scheme with attribute/user revocation based on ordered binary decision diagram (OBDD) access structure. We use the attribute group approach to achieve the attribute/user revocation in our work. Additionally, the ciphertexts and private keys are assigned version numbers to prevent the revoked group members from colluding with non-revoked members. Security and efficiency analysis show that our proposed scheme is secure, expressive and efficient. INDEX TERMS Attribute-based encryption (ABE), ordered binary decision diagram (OBDD), personal health record (PHR), attribute/user revocation, security and privacy.

show abstract

“…It enables universal and straightforward access to different computer resources such as networks, storage, devices, services, and applications. Cloud services providers (CSPs) can dynamically utilize these resources with a minimum administrative effort and interaction [2], [3]. Cloud computing provides numerous service models, primarily infrastructure, platform, and software as a service (IaaS, PaaS, and SaaS, respectively), which facilitate its adaptation.…”

Section: Introductionmentioning

confidence: 99%

Monitoring and resource management taxonomy in interconnected cloud infrastructures: a survey

et al. 2022

View full text Add to dashboard Cite

Cloud users have recently expanded dramatically. The cloud service providers (CSPs) have also increased and have therefore made their infrastructure more complex. The complex infrastructure needs to be distributed appropriately to various users. Also, the advances in cloud computing have led to the development of interconnected cloud computing environments (ICCEs). For instance, ICCEs include the cloud hybrid, intercloud, multi-cloud, and federated clouds. However, the sharing of resources is not facilitated by specific proprietary technologies and access interfaces used by CSPs. Several CSPs provide similar services but have different access patterns. Data from various CSPs must be obtained and processed by cloud users. To ensure that all ICCE tenants (users and CSPs) benefit from the best CSPs, efficient resource management was suggested. Besides, it is pertinent that cloud resources be monitored regularly. Cloud monitoring is a service that works as a third-party entity between customers and CSPs. This paper discusses a complete cloud monitoring survey in ICCE, focusing on cloud monitoring and its significance. Several current open-source monitoring solutions are discussed. A taxonomy is presented and analyzed for cloud resource management.

show abstract

A Scalable Attribute-Based Access Control Scheme with Flexible Delegation cum Sharing of Access Privileges for Cloud Storage

Cited by 41 publications

References 26 publications

Lightweight and fine‐grained access control for cloud–fog‐based electronic medical record sharing systems

Lightweight and fine‐grained access control for cloud–fog‐based electronic medical record sharing systems

Efficient and Expressive Access Control With Revocation for Privacy of PHR Based on OBDD Access Structure

Monitoring and resource management taxonomy in interconnected cloud infrastructures: a survey

Contact Info

Product

Resources

About