返回
Attribute-based fuzzy identity access control in multicloud computing environments
DOI:10.1007/s00500-017-2616-5.png)
摘要
En 中文
Firstly, we propose a multiauthority ciphertext policy attribute-based encryption scheme. It achieves fine-grained access control based upon fuzzy identity over encrypted data without any trusted center or extra interaction among multiple authorities. Moreover, it satisfies the collusion resistance requirement as long as at least one of the attribute authorities is honest. The security proof demonstrates that the proposed scheme is secure against chosen plaintext attacks in random oracle model under decisional multilinear Diffie-Hellman assumption. Secondly, we construct an attribute-based access control system for proxy-based multicloud environment to achieve distributed access control without any trusted center, manager, or additional secret keys. In our construction, the original secret keys are split into a control key, a decryption key and a set of transformation keys. It only takes the mobile device a lightweight decryption with a single decryption key. The overwhelming majority of decryption operations are outsourced to cloud via transformation keys. In addition, the attribute revocation can be realized by updating transformation keys using the control key, while ciphertexts and user's decryption key still remain unchanged. Furthermore, proxies are helpful to promote the collaboration among multiple clouds in file access control system. Finally, the performance analysis shows that our construction is flexible and practical for mobile users in proxy-based multicloud environment.
Keyword:
Attribute-based encryption
Fuzzy identity
Data access control
Multicloud computing
Collaboration
AI总结
对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
2.5
论文数:
1.0W
被引数:
2.1W
机构
引用论文
Full Valence Band Photoemission from Liquid Water Using EUV Synchrotron Radiation使用EUV同步加速器辐射从液态水中全价带光发射
Expressive, Efficient, and Revocable Data Access Control for Multi-Authority Cloud Storage面向多权限云存储的可表达、高效、可撤销的数据访问控制
DAC-MACS: Effective Data Access Control for Multiauthority Cloud Storage SystemsDac-macs: 多权限云存储系统的有效数据访问控制
Toward Efficient Multi-Keyword Fuzzy Search Over Encrypted Outsourced Data With Accuracy Improvement在加密的外包数据上实现高效的多关键字模糊搜索,并提高准确性

