返回
Deduplication-enabled CP-ABE with revocation
DOI:10.1007/s12083-024-01863-z.png)
摘要
En 中文
Ciphertext-Policy Attribute-Based Encryption (CP-ABE) provides secure data sharing under fine-grained access control. The encrypted messages can only be decrypted by the users whose attributes match the access criteria. However, traditional CP-ABE has limitation in supporting ciphertext deduplication since the duplicates maybe under the different access structure. In addition, revocation is also important to ensure that an expired user cannot decrypt, even if his attributes satisfy the access policy. In this work, we develop a deduplication-enabled CP-ABE scheme, which allows Cloud Service Provider (CSP) to support deduplication while fine-grained data sharing. Moreover, we design user identity labels and employ proxy re-encryption for efficient revocation in case of user identity change. Furthermore, our security analysis and experiments show that our approach is secure against Ciphertext Only Attacks (COA) and supports efficient deduplication and revocation. In comparison to existing schemes that support deduplication with access control mechanisms, our simulation results demonstrate that we achieve a higher rate of deduplication.
Keyword:
CP-ABE
Revocation
Deduplication
Fine-grained access control
期刊
IF:
2.6
论文数:
2.2K
被引数:
2.9K
机构
引用论文
Verifiable Attribute-Based Keyword Search Over Encrypted Cloud Data Supporting Data Deduplication
IEEE ACCESS
IF3.6
Revocation in attribute-based encryption for fog-enabled internet of things: A systematic survey基于雾的物联网的基于属性的加密中的撤销: 系统调查
INTERNET OF THINGS
IF7.6

