.png){kind=icon}
返回
Key-aggregate based access control encryption for flexible cloud data sharing
.png){kind=icon}
PRE
AI
DOI：10.1016/j.csi.2023.103800.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Cloud computing has become the priority for users to store and share data due to its numerous tempting advantages. The encryption-before-outsourcing mechanism is necessary to protect data privacy against the semi-trusted cloud server. Key-Aggregate Cryptosystem (KAC) is a novel encryption paradigm for cloud data sharing. It enables users to decrypt multiple data encrypted with different keys using a constant size aggregate key. When selectively sharing data, the KAC effectively addresses the challenges of expensive key management in symmetric encryption (SE) and eliminates the need for multiple copies of ciphertexts in public key encryption (PKE). However, previous KAC schemes can only control what data users are allowed to receive by distributing aggregate keys, but not what data users can send. This limitation could potentially allow a malicious data owner to leak sensitive information by distributing aggregate keys to unauthorized users. Therefore, this paper aims to design the key-aggregate cryptosystem with bidirectional access control, which can control both what the user can receive and what the data owner can send. Inspired by access control encryption (ACE), we first propose a key-aggregate based access control encryption with user level (KA-ACE-UL) system that can control whether a sender can share his data with a receiver. Then, we investigate a finer-grained access control policy and propose a key-aggregate based access control encryption with user-data level (KA-ACE-UDL) system that can control the data classes a sender can share with a receiver. We instantiate the KA-ACE-UL and KA-ACE-UDL schemes based on Chu et al.'s KAC scheme. We prove our proposed schemes can achieve both secure data storage and controlled data sharing, ensuring security against unauthorized receivers and malicious senders. Finally, theoretical performance analysis and practical experiments show the efficiency of our proposed schemes.
Keyword:
Cloud computing
Data sharing
Key-aggregate cryptosystem
Access control encryption
期刊
C
IF:
3.1
论文数:
2.3K
被引数:
2.0K
机构
引用论文
.png){kind=icon}
分享收藏
分享收藏Secure and Fine-Grained Flow Control for Subscription-Based Data Services in Cloud-Edge Computing
PREAI
分享收藏
查看更多内容