期刊
FRONTIERS OF INFORMATION TECHNOLOGY & ELECTRONIC ENGINEERING
卷 19, 期 11, 页码 1362-1384出版社
ZHEJIANG UNIV PRESS
DOI: 10.1631/FITEE.1800405
关键词
Attribute-based encryption; Generic user revocation; User privacy; Cloud storage; Access control; TP309; 2
类别
资金
- Natural Science Foundation of Zhejiang Province, China [Y15F020113]
- Ningbo eHealth Project, China [2016C11024]
Cloud-based storage is a service model for businesses and individual users that involves paid or free storage resources. This service model enables on-demand storage capacity and management to users anywhere via the Internet. Because most cloud storage is provided by third-party service providers, the trust required for the cloud storage providers and the shared multi-tenant environment present special challenges for data protection and access control. Attribute-based encryption (ABE) not only protects data secrecy, but also has ciphertexts or decryption keys associated with fine-grained access policies that are automatically enforced during the decryption process. This enforcement puts data access under control at each data item level. However, ABE schemes have practical limitations on dynamic user revocation. In this paper, we propose two generic user revocation systems for ABE with user privacy protection, user revocation via ciphertext re-encryption (UR-CRE) and user revocation via cloud storage providers (UR-CSP), which work with any type of ABE scheme to dynamically revoke users.
作者
我是这篇论文的作者
点击您的名字以认领此论文并将其添加到您的个人资料中。
推荐
暂无数据