Generic attribute revocation systems for attribute-based encryption in cloud storage

Genlang CHEN; Zhiqian XU; Jia-jian ZHANG; Guo-jun WANG; Hai JIANG; Miao-qing HUANG

doi:10.1631/FITEE.1800512

Your Location：

Home >

Browse articles >

Generic attribute revocation systems for attribute-based encryption in cloud storage

Regular Papers | Updated：2022-05-19

- Generic attribute revocation systems for attribute-based encryption in cloud storage
- 云存储中基于属性加密的通用型属性撤销系统
- Frontiers of Information Technology & Electronic Engineering Vol. 20, Issue 6, Pages: 773-786(2019)
- Affiliations：
  
  Institute of Ningbo Technology, Zhejiang University, Ningbo 315100, China
  Ningbo Research Institute, Zhejiang University, Ningbo 315100, China
  Independent Scholar
  School of Computer Science and Technology, Guangzhou University, Guangzhou 510006, China
  Department of Computer Science, Arkansas State University, Jonesboro 72467, USA
  Department of Computer Science and Computer Engineering, University of Arkansas, Jonesboro 72467, USA
- Author bio：
  
  Genlang CHEN, E-mail: cgl@zju.edu.cn
  [ "Zhiqian XU, E-mail: zhiqian.xu@gmail.com" ]
  [ "Hai JIANG, E-mail: hjiang@astate.edu" ]
- Funds：
- DOI：10.1631/FITEE.1800512
  CLC： TP309.2
- Received：28 August 2018，
  
  Revised：2019-;6-11，
  
  Published：2019-06
- Accepted：
Scan QR Code
Genlang CHEN, Zhiqian XU, Jia-jian ZHANG, et al. Generic attribute revocation systems for attribute-based encryption in cloud storage[J]. Frontiers of Information Technology & Electronic Engineering, 2019, 20(6): 773-786.
DOI：

Genlang CHEN, Zhiqian XU, Jia-jian ZHANG, et al. Generic attribute revocation systems for attribute-based encryption in cloud storage[J]. Frontiers of Information Technology & Electronic Engineering, 2019, 20(6): 773-786. DOI： 10.1631/FITEE.1800512.

摘要

在云存储由第三方服务商提供的今天，基于属性的加密（ABE）技术是解决数据保护和访问控制问题的首选。虽然ABE可在每个数据项级别控制数据访问，但在动态属性撤销方面依然有实际应用的局限性。本文提出一种具有用户隐私保护的ABE通用属性撤销系统。该系统基于ABE技术，可用于原本基于ABE加密的应用场景，并可通过动态撤销应用系统中任意数量的属性，实现对数据的访问控制和安全保护。

Abstract

Attribute-based encryption (ABE) has been a preferred encryption technology to solve the problems of data protection and access control

especially when the cloud storage is provided by third-party service providers. ABE can put data access under control at each data item level. However

ABE schemes have practical limitations on dynamic attribute revocation. We propose a generic attribute revocation system for ABE with user privacy protection. The attribute revocation ABE (AR-ABE) system can work with any type of ABE scheme to dynamically revoke any number of attributes.

关键词

Keywords

references

MH Au , , , PP Tsang , , , W Susilo , , , 等 . . Dynamic universal accumulators for DDH groups and their application to attribute-based anonymous credential systems . . In: Fischlin M (Ed.), Topics in Cryptology-CT-RSA. Springer Berlin, Germany , , 2009 . . 5473 295 - - 308 . . DOI: 10.1007/978-3-642-00862-7_20 http://doi.org/10.1007/978-3-642-00862-7_20 . .

J Bethencourt , , , A Sahai , , , B Waters . . Ciphertext-policy attribute-based encryption . . Proc IEEE Symp on Security and Privacy , , 2007 . . p.321 - - 334 . . DOI: 10.1109/SP.2007.11 http://doi.org/10.1109/SP.2007.11 . .

D Boneh . . The decision Diffie-Hellman problem . . 3 rd Algorithmic Number Theory Symp , , 1998 . . 1423 48 - - 63 . . DOI: 10.1007/BFb0054851 http://doi.org/10.1007/BFb0054851 . .

D Boneh , , , X Boyen , , , H Shacham . . Short group signatures . . In: Franklin M (Ed.), Advances in Cryptology-CRYPTO. Springer Berlin, Germany , , 2004 . . 3152 227 - - 242 . . DOI: 10.1007/978-3-540-28628-8_3 http://doi.org/10.1007/978-3-540-28628-8_3 . .

M Carroll , , , A van der Merwe , , , P Kotzé . . Secure cloud computing: benefits, risks and controls . . Information Security South Africa , , 2011 . . p.1 - - 9 . . DOI: 10.1109/ISSA.2011.6027519 http://doi.org/10.1109/ISSA.2011.6027519 . .

GL Chen , , , ZQ Xu , , , H Jiang , , , 等 . . Generic user revocation systems for attribute-based encryption in cloud storage . . Front Inform Technol Electron Eng , , 2018 . . 19 ( ( 11 ): ): 1362 - - 1384 . . DOI: 10.1631/FITEE.1800405 http://doi.org/10.1631/FITEE.1800405 . .

J Gibson , , , R Rondeau , , , D Eveleig , , , 等 . . Benefits and challenges of three cloud computing service models . . 4 th Int Conf on Computational Aspects of Social Networks , , 2012 . . p.198 - - 205 . . DOI: 10.1109/CASoN.2012.6412402 http://doi.org/10.1109/CASoN.2012.6412402 . .

J Hur , , , DK Noh . . Attribute-based access control with efficient revocation in data outsourcing systems . . IEEE Trans Parall Distrib Syst , , 2011 . . 22 ( ( 7 ): ): 1214 - - 1221 . . DOI: 10.1109/TPDS.2010.203 http://doi.org/10.1109/TPDS.2010.203 . .

Y Imine , , , A Lounis , , , A Bouabdallah . . Immediate attribute revocation in decentralized attribute-based encryption access control . . IEEE Trustcom/BigDataSE/ ICESS , , 2017 . . p.33 - - 40 . . DOI: 10.1109/Trustcom/BigDataSE/ICESS.2017.217 http://doi.org/10.1109/Trustcom/BigDataSE/ICESS.2017.217 . .

A Joux . . A one round protocol for tripartite Diffie-Hellman . . In: Bosma W (Ed.), Algorithmic Number Theory. Springer Berlin, Germany , , 2000 . . 1838 385 - - 393 . . DOI: 10.1007/10722028_23 http://doi.org/10.1007/10722028_23 . .

A Joux , , , K Nguyen . . Separating decision Diffie-Hellman from computational Diffie-Hellman in cryptographic groups . . J Cryptol , , 2003 . . 16 ( ( 4 ): ): 239 - - 247 . . DOI: 10.1007/s00145-003-0052-4 http://doi.org/10.1007/s00145-003-0052-4 . .

J Katz , , , Y Lindell . . Introduction to Modern Cryptography (2 nd Ed.) . . Chapman and Hall/CRC, Boca Raton, America , , 2014 . . .

KS McCurley . . The discrete logarithm problem . . Proc Symp in Applied Mathematics , , 1990 . . p.49 - - 74 . . . .

A Menezes , , , T Okamoto , , , SA Vanstone . . Reducing elliptic curve logarithms to logarithms in a finite field . . IEEE Trans Inform Theory , , 1993 . . 39 ( ( 5 ): ): 1636 - - 1646 . . DOI: 10.1109/18.259647 http://doi.org/10.1109/18.259647 . .

HG Miller , , , J Veiga . . Cloud computing: will commodity services benefit users long term . . IT Prof , , 2009 . . 11 ( ( 6 ): ): 57 - - 59 . . DOI: 10.1109/MITP.2009.117 http://doi.org/10.1109/MITP.2009.117 . .

T Naruse , , , M Mohri , , , Y Shiraishi . . Attribute-based encryption with attribute revocation and grant function using proxy re-encryption and attribute key for updating . . In: Park J, Stojmenovic I, Choi M, et al. (Eds.), Future Information Technology. Springer Berlin Heidelberg , , 2014 . . 276 119 - - 125 . . DOI: 10.1007/978-3-642-40861-8_18 http://doi.org/10.1007/978-3-642-40861-8_18 . .

A Sahai , , , B Waters . . Fuzzy identity-based encryption . . In: Cramer R (Ed.), Advances in Cryptology-EUROCRYPT. Springer Berlin, Germany , , 2005 . . 3494 457 - - 473 . . DOI: 10.1007/11426639_27 http://doi.org/10.1007/11426639_27 . .

ER Verheul . . Self-blindable credential certificates from the weil pairing . . In: Boyd C (Ed.), Advances in Cryptology-ASIACRYPT. Springer Berlin, Germany , , 2001 . . 2248 533 - - 551 . . DOI: 10.1007/3-540-45682-1_31 http://doi.org/10.1007/3-540-45682-1_31 . .

PP Wang , , , DG Feng , , , LW Zhang . . Towards attribute revocation in key-policy attribute based encryption . . In: Lin D, Tsudik G, Wang X (Eds.), Cryptology and Network Security. Springer Berlin, Germany , , 2011 . . 7092 272 - - 291 . . DOI: 10.1007/978-3-642-25513-7_19 http://doi.org/10.1007/978-3-642-25513-7_19 . .

XX Xie , , , H Ma , , , J Li , , , 等 . . New ciphertext-policy attribute-based access control with efficient revocation . . In: Mustofa K, Neuhold EJ, Tjoa AM, et al. (Eds.), Information and Communication Technology. Springer Berlin, Germany , , 2013 . . 7804 373 - - 382 . . DOI: 10.1007/978-3-642-36818-9_41 http://doi.org/10.1007/978-3-642-36818-9_41 . .

L Xue , , , Y Yu , , , YN Li , , , 等 . . Efficient attribute-based encryption with attribute revocation for assured data deletion . . Inform Sci , , 2018 . . 479 640 - - 650 . . DOI: 10.1016/j.ins.2018.02.015 http://doi.org/10.1016/j.ins.2018.02.015 . .

K Yang , , , XH Jia , , , K Ren . . Attribute-based fine-grained access control with efficient revocation in cloud storage systems . . Proc 8 th ACM SIGSAC Symp on Information, Computer and Communications Security , , 2013 . . p.523 - - 528 . . DOI: 10.1145/2484313.2484383 http://doi.org/10.1145/2484313.2484383 . .

SC Yu , , , C Wang , , , K Ren , , , 等 . . Attribute based data sharing with attribute revocation . . Proc 5 th ACM Symp on Information, Computer and Communications Security , , 2010 . . p.261 - - 270 . . DOI: 10.1145/1755688.1755720 http://doi.org/10.1145/1755688.1755720 . .

Views

Downloads

CSCD

Alert me when the article has been cited

Submit

Tools

Publicity Resources

Generic user revocation systems for attribute-based encryption in cloud storag

RCDS: a right-confirmable data-sharing model based on symbol mapping coding and blockchain

MULKASE: a novel approach for key-aggregate searchable encryption for multi-owner data

Related Author

Hai JIANG

Kuan-ching LI

Liang WANG

Shunjiu HUANG

Lina ZUO

Jun LI

Wenyuan LIU

Mukti PADHYA

Related Institution

Department of Computer Science, Arkansas State University, Jonesboro

Department of Computer Science and Information Engineering, Providence University

School of Cyber Security and Computer, Hebei University

Xiong’an Intelligent City Innovation Federation

School of Information Science and Engineering, Yanshan University

Chat

Address：Zhejiang University Press, 148 Tianmushan Road, Hangzhou, China Postal code：310028
Tel：+86-571-88273162 Email：fitee@zju.edu.cn
It is recommended to read the content of this site in Chrome&IE9+. Please switch to extreme mode in browser 360.
Cookies We use cookies to help provide and enhance our service and tailor content. By continuing, you agree to the use of cookies.

⁰