Hierarchical Access Structure-based Scheme with Outsourcing and Revocation Mechanism for Cloud Environment
DOI:
https://doi.org/10.26636/jtit.2023.4.1299Keywords:
attribute revocation, cloud computing, hierarchical access control, outsourced decryption, trustAbstract
Ciphertext policy attribute-based encryption (CPABE) is one of the efficient implementations of encrypted access control scheme for cloud computing. Though multiple implementations of CPABE exist, there are some issues that need to be addressed, including efficient revocation approach, decryption time, storage cost etc. In this paper, an efficient scheme that incorporates a hierarchical access structure, outsourced decryption, as well as user and attribute revocation is presented. The hierarchical access structure is utilized to encrypt multiple data using one common access structure and makes the encryption process more efficient. The outsourcing server is used to perform partial decryption, so that all heavy computations are performed by this server and less overhead is incurred by the data user. The proposed framework also integrates the evaluation of trustworthiness of data users and service providers to ensure trusted and encrypted access control procedures. The paper also presents an analysis of the time required for performing different operations. Simulation results show that the proposed scheme outperforms the existing approaches.
Downloads
References
[1] A. Sahai and B. Waters, “Fuzzy identity-based encryption”, in Advances in Cryptology – EUROCRYPT 2005, LNCS, vol. 3494. Berlin, Heidelberg: Springer, 2005, pp. 457–473.
View in Google Scholar
[2] J. Bethencourt, A. Sahai, and B. Waters, “Ciphertext policy attribute-based encryption”, in Proc. IEEE Symposium on Security and Privacy, Berkeley, USA, 2007, pp. 321–334.
View in Google Scholar
[3] V. Goyal, O. Pandey, A. Sahai, and B. Waters, “Attribute-based encryption for fine-grained access control of encrypted data”, in Proc. of the 13th ACM Conference on Computer and Communications Security, Alexandria, USA, 2006, pp. 89–98.
View in Google Scholar
[4] Y. Yang, J. Sun, Z. Liu, and Y. Qiao, “Practical revocable and multi-authority CP-ABE scheme from RLWE for cloud computing”, Journal of Information Security and Applications, vol. 65, Article no. 103108, 2022.
View in Google Scholar
[5] Z. Zhang, W. Zhang, and Z. Qin, “A partially hidden policy CP-ABE scheme against attribute values guessing attacks with online privacy-protective decryption testing in IoT assisted cloud computing”, Future Generation Computer Systems, vol. 123, pp. 181–195, 2021.
View in Google Scholar
[6] H. Zhong, Y. Zhou, Q. Zhang, Y. Xu, and J. Cui, “An efficient and outsourcing-supported attribute-based access control scheme for edge-enabled smart healthcare”, Future Generation Computer Systems, vol. 115, pp. 486–496, 2021.
View in Google Scholar
[7] M. Mandal, “Privacy-preserving fully anonymous ciphertext policy attribute-based broadcast encryption with constant-size secret keys and fast decryption”, Journal of Information Security and Applications, vol. 55, Article no. 102666, 2020.
View in Google Scholar
[8] S. Wang, S. Jia, and Y. Zhang, “Verifiable and multi-keyword searchable attribute-based encryption scheme for cloud storage”, IEEE Access, vol. 7, pp. 50136–50147, 2019.
View in Google Scholar
[9] Y. He et al., “An efficient ciphertext-policy attribute-based encryption scheme supporting collaborative decryption with blockchain”, IEEE Internet of Things Journal, vol. 9, no. 4, pp. 2722–2733, 2022.
View in Google Scholar
[10] K. Yang et al., “Attribute-based encryption with efficient revocation from lattices”, International Journal of Network Security, vol. 22, no. 1, pp. 161–170, 2020.
View in Google Scholar
[11] J. Li et al., “An efficient attribute-based encryption scheme with policy update and file update in cloud computing”, IEEE Transactions on Industrial Informatics, vol. 15, no. 12, pp. 6500–6509, 2019.
View in Google Scholar
[12] S. Tu, M. Waqas, F. Huang, G. Abbas, and Z. H. Abbas, “A revocable and outsourced multi-authority attribute-based encryption scheme in fog computing”, Computer Networks, vol. 195, Article no. 108196, 2021.
View in Google Scholar
[13] W. Wang, Z. Wang, B. Li, Q. Dong, and D. Huang, “IR-CP-ABE: Identity revocable ciphertext-policy attribute-based encryption for flexible secure group-based communication”, IACR Cryptology ePrint Archive, Report 2017/1100, 2017 [Online]. Available: https://ia.cr/2017/1100.
View in Google Scholar
[14] D. Han, N. Pan, and K.-C. Li, “A traceable and revocable ciphertext-policy attribute-based encryption scheme based on privacy protection”, IEEE Transactions on Dependable and Secure Computing, vol. 19, no. 1, pp. 316–327, 2022.
View in Google Scholar
[15] Z. Liu, F. Wang, K. Chen, and F. Tang, “A new user revocable ciphertext-policy attribute-based encryption with ciphertext update”, Security and Communication Networks, vol. 2020, Article no. 8856592, 2020.
View in Google Scholar
[16] Z. Li et al., “An efficient ABE scheme with verifiable outsourced encryption and decryption”, IEEE Access, vol. 7, pp. 29023–29037, 2019.
View in Google Scholar
[17] J. Yu, G. He, X. Yan, Y. Tang, and R. Qin, “Outsourced ciphertext-policy attribute-based encryption with partial policy hidden”, International Journal of Distributed Sensor Networks, vol. 16, no. 5, 2020.
View in Google Scholar
[18] J. Li, Y. Zhang, X. Chen, and Y. Xiang, “Secure attribute-based data sharing for resource-limited users in cloud computing”, Computers and Security, vol. 72, pp. 1–12, 2018.
View in Google Scholar
[19] K. Fan, J. Wang, X. Wang, H. Li, and Y. Yang, “A secure and verifiable outsourced access control scheme in fog-cloud computing”, Sensors, vol. 17, no. 7, Article no. 1695, 2017.
View in Google Scholar
[20] R. Zhang, H. Ma, and Y. Lu, “Fine-grained access control system based on fully outsourced attribute-based encryption”, Journal of Systems and Software, vol. 125, pp. 344–353, 2017.
View in Google Scholar
[21] J. Zhao, P. Zeng, and K.-K. R. Choo, “An efficient access control scheme with outsourcing and attribute revocation for fog-enabled e-health”, IEEE Access, vol. 9, pp. 13789–13799, 2021.
View in Google Scholar
[22] T. N. Mujawar and L. B. Bhajantri, “Efficient direct and immediate user revocable attribute-based encryption scheme”, in Proc. 5th International Conference on Intelligent Sustainable System (ICISS 2022), Tirunelveli, India, 2022 [Online]. Available: https://link.springer.com/chapter/10.1007/978-981-19-2894-9_38.
View in Google Scholar
[23] T. N. Mujawar and L. B. Bhajantri, “The trusted hierarchical access structure-based encryption scheme for cloud computing”, International Journal of Cloud Applications and Computing, vol. 12, no. 1, pp. 1–17, 2022.
View in Google Scholar
[24] T. N. Mujawar and L. B. Bhajantri, “Behavior and feedback-based trust computation in cloud environment”, Journal of King Saud University – Computer and Information Sciences, vol. 34, no. 8, pp. 4956–4967, 2022.
View in Google Scholar
[25] A. Lewko and B. Waters, “Decentralizing attribute-based encryption”, in Advances in Cryptology – EUROCRYPT 2011, Tallinn, Estonia, 2011.
View in Google Scholar
[26] A. De Caro and V. Iovino, “jPBC: Java pairing-based cryptography”, in Proc. 2011 IEEE Symposium on Computers and Communications, Kerkyra, Greece, 2011.
View in Google Scholar
Downloads
Submitted
Copyediting
Published
Issue
Section
License
Copyright (c) 2023 Tabassum N. Mujawar, Lokesh B. Bhajantri, Ashok V. Sutagundar
This work is licensed under a Creative Commons Attribution 4.0 International License.
