Hierarchical attribute-based encryption and scalable user revocation for sharing data in cloud servers

Wang, Guojun; Liu, Qin; Wu, Jie; Guo, Minyi

doi:10.1016/j.cose.2011.05.006

Cited by 215 publications

(121 citation statements)

References 2 publications

Supporting

Mentioning

121

Contrasting

Order By: Relevance

“…This helps put customers at ease since they have a clear understanding of how their personal data will be used. The major threat to data confidentiality and privacy is from the employees of the Cloud service providers who have Table 10 Key Findings Key Findings References Cloud service providers face a plethora of security issues and need to implement various security measures [12,13,41] Different data security measures need to be put in place for the various phases of the data life cycle, specially to ensure data confidentiality and privacy [36,57] Cloud service providers should disclose exactly what personal data will be collected and what that data will be used for, thereby maintaining privacy and confidentiality [36] Data should be properly encrypted so that it cannot be accessed or misused by the employees of service provider [38,39] Malicious attacks from hackers need to be prevented at every stage of the data life cycle so that there is no breach of data confidentiality [40,43] Cloud services have to comply with the country's legal rules, which includes disclosing customer data to the law enforcement agencies if needed [13,37] access to customer data. In order to protect the data from being misused by the employees, it is necessary to have a good data encryption, which makes it difficult for employees to access the data itself, thereby ensuring privacy and data confidentiality.…”

Section: Discussionmentioning

confidence: 99%

See 1 more Smart Citation

The Impact of Security Concernson Personal Innovativeness,Behavioural and Adoption Intentionsof Cloud Technology

Balasooriya

Wibowo

Grandhi

et al. 2017

JSN

View full text Add to dashboard Cite

Cloud services have gained popularity due to the number of advantages they provide to organizations and individuals such as reduced cost, better storage, and improved performance. However, a lot of organizations are still unwilling to shift their traditional in-house services to the Cloud due to the various security implications. Many Cloud service users are worried about the security of their data and privacy being violated. There are many reported cases of Cloud service providers illegally collecting personal data of their customers, which has led to service providers being viewed with greater suspicion than before. To overcome this, Cloud service providers must ensure that they inform the users exactly about which data is being used and how it is used. While it is the duty of the Cloud service provider to protect the data confidentiality and privacy of their customers, this should not be misunderstood or misused by customers to conduct illegal activities because Cloud service providers have to abide by the rules and regulations, including co-operating with law enforcement agencies if they need any particular customer's data. In this paper, we research the main security aspects for ensuring data confidentiality and privacy.

show abstract

Section: Discussionmentioning

confidence: 99%

“…[38]. A Cloud service provider, Skyhigh has conducted a survey amongst healthcare organizations regarding Cloud service usage and security risks.…”

Section: Confidentiality and Privacymentioning

confidence: 99%

The Impact of Security Concernson Personal Innovativeness,Behavioural and Adoption Intentionsof Cloud Technology

Balasooriya

Wibowo

Grandhi

et al. 2017

JSN

View full text Add to dashboard Cite

show abstract

“…HABE is the best control mechanism that provides the best scalability and flexibility. However, this was not enough for the system developers and the hybrid HASBE model was developed [90,91]. The most important feature of this access control is that it gives the information of which user, in a secure way, belongs to which class.…”

Section: Hierarchical Attribute Based Access Controlmentioning

confidence: 99%

Survey on Access Control Mechanisms in Cloud Computing

Karataş

Akbulut

2018

JCSM

View full text Add to dashboard Cite

The benefits that Internet-based applications and services have given to the end user with today's cloud computing technology are very remarkable. The distributed services instantly scaled over the Internet provided by cloud computing can be achieved by using some mechanisms in the background. It is a critical task for end users to control access to resources because lack of control often leads to security risks. In addition, this may cause systems to fail. This paper describes seven different access control mechanisms used in cloud computing platforms for different purposes. Besides, the advantages and disadvantages of various models developed from previous service-based architectures and used for cloud computing are detailed and classified. During the assessments, NIST's metrics were taken as a reference, and in the study, 109 articles from the past decade were examined. We also compared our research with the existing survey papers.

show abstract

“…However, CP-ABE and KP-ABE were not feasible to be applied for organisations where the users are arranged in a hierarchical manner or in groups. These limitations led to the development of several hierarchical-based ABE's (Yang et al, 2013;Yu et al, 2010;Wan et al, 2012;Wang et al, 2010Wang et al, , 2011 which provides the solution for applying the enhanced CP-ABE-based schemes for organisations with hierarchical structure. Most of the discussed methods make use of disjunctive normal form policy by assuming all attributes in one conjunctive clause leading to implementation difficulty and computational overheads.…”

Section: Related Workmentioning

confidence: 99%

HB-PPAC: hierarchy-based privacy preserving access control technique in public cloud

Senthilkumar

Viswanatham

2017

IJHPCN

View full text Add to dashboard Cite

Cloud computing is one term that has evolved drastically over the years. It involves deploying groups of remote servers and software that are networked, that will allow centralised data storage and online access to computer services or resources. However, an important problem in public clouds is how to selectively share data based on fine-grained attribute-based access control policies while at the same time assuring confidentiality of the data and preserving the privacy of users from the cloud. Keeping in mind the confidentiality of data that must be provided, many schemes and encryption algorithms have been implemented, but most of those schemes have high computational costs and overload on the data owner. In this paper, we are proposing a hierarchy-based privacy preserving access control scheme, in which data is encrypted and decrypted by the cloud using the blinded encryption and decryption technique that retains the constant computation cost to the owner and the user for any large file size, thus it makes our scheme suitable for energy deficient devices. The experimental result shows that our scheme is more suitable for energy deficient devices without compromising the security of data. V. Madhu Viswanatham is currently an Associate Professor from the School of Computing Science and Engineering, VIT University, Vellore, India. He has several years of experience working in academia, teaching, and research. He has guided one PhD scholar and supervising six scholars. He received his PhD in Computer Science and Technology from the SK University, Andhra Pradesh, India. He has supervised MTech and BTech students. He organised several workshops and faculty development programs. His research interests include information security mobile, wireless systems, image processing and cloud computing.

show abstract

Hierarchical attribute-based encryption and scalable user revocation for sharing data in cloud servers

Cited by 215 publications

References 2 publications

The Impact of Security Concernson Personal Innovativeness,Behavioural and Adoption Intentionsof Cloud Technology

The Impact of Security Concernson Personal Innovativeness,Behavioural and Adoption Intentionsof Cloud Technology

Survey on Access Control Mechanisms in Cloud Computing

HB-PPAC: hierarchy-based privacy preserving access control technique in public cloud

Contact Info

Product

Resources

About