Mix&Slice for Efficient Access Revocation on Outsourced Data

doi:10.1109/TDSC.2023.3280590

Mix&Slice for Efficient Access Revocation on Outsourced Data

2024-05-01

0

OA

AI

E

Enrico Bacis

S

Sabrina De Capitani di Vimercati

Pierangela Samarati *

DOI：10.1109/TDSC.2023.3280590

Original

Original request for help

Save

Abstract

En 中文

A complex problem when outsourcing data to the cloud is access control management. Encryption, by wrapping data with a self-enforcing protection layer, provides access control enforcement by making resources intelligible only to users holding the necessary key. The real challenge becomes then the efficient revocation of access. We address this challenge and present an approach to effectively and efficiently enforce access revocation on resources stored at external cloud providers. The approach relies on a resource transformation that provides strong mutual inter-dependency in its encrypted representation. To revoke access on a resource, it is then sufficient to update a small portion of it, with the guarantee that the resource as a whole (and any portion of it) will become unintelligible to those from whom access is revoked. Our experimental results show the effectiveness of our approach, and confirm its efficiency, especially when managing large resources with dynamic access policy.

Keywords:

Access control

access revocation

resource encryption

mix&slice

Mix&Slice for Efficient Access Revocation on Outsourced Data

Abstract

Journal

Organization