FUR-HABE:A Hierarchical CP-ABE Scheme with Traceable Fine-grained User Revocation for Cloud Storage

Abstract

An effective method to protect cloud data is access control. But, the efficiency of key distribution by a single authority is low, and it is difficult to achieve dynamic attribute revocation when system properties are shared by multiple users. Existing attribute revocation mechanisms face challenges in terms of functional complexity and computational efficiency, which hinder their practical application. To address these issues, this paper put forward a Hierarchical CP-ABE scheme with Traceable Fine-grained User Revocation for Cloud Storage (FUR-HABE). In this scheme, most of the decryption calculations are outsourced to cloud servers. It employs a layered key authorization mechanism to provide flexible and scalable key delegation. Additionally, the scheme supports key encapsulation key (KEK) attribute revocation and user revocation to accommodate different revocation needs, enabling flexible revocation. Experimental results show that the proposed scheme is proven to be IND-CPA secure under the chosen plaintext attack strategy based on the decision-making q-BDHE assumption in the standard model. Compared to related work, this scheme exhibits superiority.