Contextual attribute‐based access control scheme for cloud storage using blockchain technology

Abstract

Access control of data that are outsourced to cloud storage is a challenging problem because data owners lose direct control over outsourced data. Attribute‐based encryption (ABE) is a potential cryptographic solution to provide confidentiality and flexible sharing of these outsourced data. However, the traditional ABE schemes do not meet the need of the current dynamic environment where data access not only considers the user's static and inherent attributes but also takes the user's contextual information such as location and time of access. This paper presents an improved ABE scheme using blockchain technology that can handle the frequently changing location and time attributes of data users efficiently, leading to support for fine‐grained access control of cloud storage embedding contextual information in the access policy of ABE. A prototype implementation of the proposed ABE scheme using solidity on the Ethereum platform and the experimental evaluation in terms of performance and execution cost shows a promising result.