Efficient Revocable Multi-Authority Attribute-Based Encryption for Cloud Storage

Abstract

As is known, attribute-based encryption (ABE) is usually adopted for cloud storage, both for its achievement of fine-grained access control over data, and for its guarantee of data confidentiality. Nevertheless, single-authority attribute-based encryption (SA-ABE) has its obvious drawback in that only one attribute authority can assign the users' attributes, enabling the data to be shared only within the management domain of the attribute authority, while rendering multiple attribute authorities unable to share the data. On the other hand, multi-authority attribute-based encryption (MA-ABE) has its advantages over SA-ABE. It can not only satisfy the need for the fine-grained access control and confidentiality of data, but also make the data shared among different multiple attribute authorities. However, existing MA-ABE schemes are unsuitable for the devices with resources-constraint, because these schemes are all based on expensive bilinear pairing. Moreover, the major challenge of MA-ABE scheme is attribute revocation. So far, many solutions in this respect are not efficient enough. In this paper, on the basis of the elliptic curves cryptography, we propose an efficient revocable multi-authority attribute-based encryption (RMA-ABE) scheme for cloud storage. The security analysis indicates that the proposed scheme satisfies indistinguishable under adaptive chosen plaintext attack assuming hardness of the decisional Diffie-Hellman problem. Compared with the other schemes, the proposed scheme gets its advantages in that it is more economical in computation and storage.

Multiauthority Attribute-Based Encryption With Dynamic Membership From Lattices

“…Ming et al [28] proposed a pairing-free MA-ABE scheme with revocability. Without pairing operations, their scheme has a lower computational cost.…”

A Review on Challenges in Cloud Computing Security and Recent Researchs

“…Şifreli metin politikalı özellik tabanlı aranabilir şifreleme (CP-ABSE) bulut ortamlarınd a veri gizliliği ve detaylı erişim kontrolü sağlanması için yaygın olarak kullanılmakta olup, çalışmada [50], kafes tabanlı şifreleme ile zenginleştirilerek kuantum saldırılarına karşı dayanıklı bir model (CP-ABSEL) sunulmuştur. Çok otoriteli özellik tabanlı şifreleme şemalarının kaynak kısıtı bulunan cihazlar için uygun olmadığı noktasından hareketle, çalışmada [51], kaldırılabilir çok otoriteli özellik tabanlı şifreleme (RMA-ABE) şeması önerilmiştir. Hibrit Pailler-Blowf is h algoritmasının kullanıldığı çalışmada [52], hesaplama zamanı ve şifreli metin uzunluğu azaltılarak, çoklu bulut ortamlarının da dahil olduğu bulut senaryolarında etkin bir depolama sağlanması amaçlanmıştır.…”

Outsourcing multiauthority access control revocation and computations over medical data to mobile cloud

“…They moreover still exhibit server collusion attacks 22,25 . Finally, current works still impose significant computational overhead on the DO and the DU 20,27,31,38 …”

“…22,25 Finally, current works still impose significant computational overhead on the DO and the DU. 20,27,31,38 To improve on existing ABE access control schemes, 39 raised concerns over revocation. In ABE, there are two revocation metrics: user revocation and attribute revocation.…”

“…However, the author's scheme does not sustain decryption outsourcing and imposes a significant overhead on the DU. Ming et al 27 further proposed a novel efficient multiauthority ABE scheme with revocation. Their scheme, however, only endorses attribute revocation and does not support encryption or decryption outsourcing.…”