Return
Deduplication-enabled CP-ABE with revocation
DOI:10.1007/s12083-024-01863-z.png)
Abstract
En 中文
Ciphertext-Policy Attribute-Based Encryption (CP-ABE) provides secure data sharing under fine-grained access control. The encrypted messages can only be decrypted by the users whose attributes match the access criteria. However, traditional CP-ABE has limitation in supporting ciphertext deduplication since the duplicates maybe under the different access structure. In addition, revocation is also important to ensure that an expired user cannot decrypt, even if his attributes satisfy the access policy. In this work, we develop a deduplication-enabled CP-ABE scheme, which allows Cloud Service Provider (CSP) to support deduplication while fine-grained data sharing. Moreover, we design user identity labels and employ proxy re-encryption for efficient revocation in case of user identity change. Furthermore, our security analysis and experiments show that our approach is secure against Ciphertext Only Attacks (COA) and supports efficient deduplication and revocation. In comparison to existing schemes that support deduplication with access control mechanisms, our simulation results demonstrate that we achieve a higher rate of deduplication.
Keywords:
CP-ABE
Revocation
Deduplication
Fine-grained access control
Journal
IF:
2.6
Papers:
2.2K
Citations:
2.9K
Organization
Cited Papers
Verifiable Attribute-Based Keyword Search Over Encrypted Cloud Data Supporting Data Deduplication
IEEE ACCESS
IF3.6
Revocation in attribute-based encryption for fog-enabled internet of things: A systematic survey
INTERNET OF THINGS
IF7.6

