Systematizing core properties of pairing-based attribute-based encryption to uncover remaining challenges in enforcing access control in practice

Abstract

Attribute-based encryption (ABE) cryptographically implements fine-grained access control on data. As such, data can be stored by an entity that is not necessarily trusted to enforce access control, or an entity that is not even trusted to have access to the plaintext data at all. Instead, access control can be externally enforced by a trusted entity. Additionally, some multi-authority variants of ABE—which do not have a central authority—can effectively and securely implement access control in multiple-domain settings. Furthermore, ABE is the only cryptographic approach to fine-grained access control that does not require an online trusted third party during access requests, and thus provides better availability properties. The actual realization of these theoretical advantages in practice depends on whether current state-of-the-art ABE schemes support the necessary core properties. Much progress has been made in the last two decades in pairing-based ABE schemes, owing to their versatility and efficiency. In fact, it is possible to support most core properties under strong security guarantees, while incurring acceptable storage and computational costs. It is therefore a good time to ask ourselves whether pairing-based ABE has reached its full practical potential. To answer this question, we provide a comprehensive systematized overview of various existing pairing-based ABE schemes and their core properties. We also investigate the relationship between these core properties and real-world access control requirements. We show that a few challenges remain, that must be overcome for ABE to reach its full potential as a mechanism to implement efficient and secure access control in practice.

Attribute-Based Management of Secure Kubernetes Cloud Bursting

“…Moreover, ABE functions enables a high level of user independence, as authorized users can independently obtain access by decrypting ciphertexts once they possess the appropriate secret key. In this way, users can avoid interacting further with any policy-enforcing entities that may be unavailable at the time of an access request [63].…”

“…This enables the inclusion of logical expressions involving conjunctions, disjunctions, and negations. This expanded capability is outlined in the taxonomy of ABE schemes presented in [63].…”

“…The user global identity (GID) ties together the portions of the secret key generated by different authorities [31]. This is related to two crucial functions: (1) ensures that a user must use all the pieces of the private key together for successful decryption, (2) prevents users from exchanging key portions, thus mitigating collusion attacks [63].…”

A Novel Approach to Strengthening Web-Based Cloud Services: Two-Factor Access Control

“…As a result, our techniques exhibit conceptual parallels with traditional access control approaches like Role-Based Access Control (RBAC). [19] Furthermore, we offer a practical execution of our system and present performance measurements to exhibit its efficiency in real-world scenarios. Mediated cryptography was initially proposed to enable instant revocation of public keys.…”

TinyABE: Unrestricted Ciphertext-Policy Attribute-Based Encryption for Embedded Devices and Low-Quality Networks

“…CP-ABE has proven to be a valuable primitive in the enforcement of fine-grained access control on a cryptographic level [16,35,47]. It allows the encrypting device to determine who gets access to the plaintext, without requiring an online trusted third party to act as an intermediary [52]. Instead, it requires a trusted entity to issue secret keys to eligible users, which can be used to access the data for which those are authorized.…”