CloudFile: A cloud data access control system based on mobile social trust

Abstract

Personal data management at cloud with mobile devices confronts a number of practical challenges such as security, efficiency and usability. Many existing solutions suffer from high computation and communication costs, thus impractical to be deployed in mobile domains. Notably, high popularity of mobile social networking provides a good platform to assess social trust in a pervasive way, which can be applied to automatically manage personal data access at the cloud with sound performance and effectiveness. This paper presents the design and implementation of a personal cloud data access control system named CloudFile based on trust evaluation in mobile social networking. The CloudFile uses a Key Policy-Attribute Based Encryption (KP-ABE) scheme to control personal data access based on social trust in order to guarantee the safety of mobile cloud data storage. System performance tests show that the CloudFile is flexible for controlling data access, secure for personal data storage, and efficient to be deployed by mobile devices. Particularly, we investigate user acceptance on the CloudFile system. Based on user feedback, we conclude that the CloudFile is accepted with regard to perceived ease of use, practicality, user interface, playfulness and intuitive attitude.

Investigating the Adoption of Hybrid Encrypted Cloud Data Deduplication With Game Theory

“…Besides, they applied reputation as a metric to decide whether an entity is eligible to access data. ABE is adopted to support data access control at the data owner side in [107]. The data owner determines the eligibility of a data user by evaluating its social trust in [107].…”

“…Therefore, the involvement of reputation can motivate cooperative behavior. To achieve this in practice, we can involve reputation-based access control schemes with different policies [105,107] into deduplication schemes. Although social recommendation considers human factors and can be employed to study competition between CSPs, this topic lies outside the scope of this dissertation.…”

“…Storing data in the cloud saves local storage space, reduces data management costs, and enables data users to easily access their data in the cloud everywhere and at any time. In recent years, various ap-Introduction proaches have been proposed for securely and efficiently outsourcing personal data to the cloud, including protecting data security and privacy [15,17,36,60,88,90,92,93,100], controlling data access [19,20,21,24,76,91,103,104,105,107,111,121], cloud data processing [22,106,118], verifiable computation [109,115,116], and encrypted data deduplication [23,34,50,51,55,56,61,99,101,102,108,110,117].…”

Efficient Attribute-Based Encryption Outsourcing Scheme With User and Attribute Revocation for Fog-Enabled IoT

“…Some schemes used the updated version number to generate the updated key by the attribute authority to revoke attributes [35][36][37]. In the scheme [38][39][40], the cloud is used to perform the revocation process. Yan et al [38] revoked attributes through the cooperation between the data owner and the cloud, but the data owner needs to generate new keys for the non-revoked users, which cost them a lot of computing time.…”

“…In the scheme [38][39][40], the cloud is used to perform the revocation process. Yan et al [38] revoked attributes through the cooperation between the data owner and the cloud, but the data owner needs to generate new keys for the non-revoked users, which cost them a lot of computing time. Wang et al [39] used the cloud to re-encrypt the ciphertext according to the revocation list and respond to the queries of the nonrevoked users.…”