返回
Secure and Fine-Grained Flow Control for Subscription-Based Data Services in Cloud-Edge Computing
DOI:10.1109/TSC.2022.3203378.png)
摘要
En 中文
With the popularity of cloud computing services, an increasing number of users begin to use subscription-based services. Due to the semi-trusted cloud servers that may access the outsourced data, and malicious senders who may publish unauthorized data or junk data, access control encryption (ACE) schemes have been studied recently to enforce secure data write control as well as read control. However, their access control policies are specified by the authority or publishers, which do not apply to the subscriptions. In this paper, we propose DSFlow, a secure and fine-grained flow control system for subscription-based data services. DSFlow is designed in the cloud-edge computing architecture, which employs edge nodes to control the communications between publishers and cloud servers by sanitizing the original ciphertexts to resist malicious publishers, and allows any valid subscriber to decrypt the sanitized ciphertexts in cloud. We introduce a receiver-policy attribute-based ACE (RA-ACE) scheme for DSFlow, which embeds the fine-grained access control policy within the receiver's decryption key. We give a concrete construction of RA-ACE from key-policy attribute-based encryption, structure-preserving signature and non-interactive zero-knowledge proof, and formally prove the no-read rule and no-write rule of RA-ACE. The experiments demonstrate the efficiency of DSFlow compared with existing schemes.
Keyword:
Cloud computing
Encryption
Receivers
Access control
Servers
Resists
Secure storage
Flow control
access control encryption
subscription-based services
cloud-edge computing
期刊
IF:
5.8
论文数:
2.1K
被引数:
6.5K
机构
引用论文
Studies on Orchidaceae Alkaloids. XXXV. Alkaloids from Hammarbya paludosa (L.) O.K. and Liparis keitaoensis Hay.兰科生物碱研究. XXXV. 哈马尔比娅·帕鲁多萨 (L.) O.K. 和丽芭里斯·基塔奥森斯 (Hay.) 的生物碱。
Scalable and Secure Sharing of Personal Health Records in Cloud Computing Using Attribute-Based Encryption使用基于属性的加密在云计算中实现个人健康记录的可扩展和安全共享

