Efficient revocation in ciphertext-policy attribute-based encryption based cryptographic cloud storage

Yong CHENG; Zhi-ying WANG; Jun MA; Jiang-jiang WU; Song-zhu MEI; Jiang-chun REN

doi:10.1631/jzus.C1200240

Your Location：

Home >

Browse articles >

Efficient revocation in ciphertext-policy attribute-based encryption based cryptographic cloud storage

Computer Engineering | Updated：2022-12-09

- Efficient revocation in ciphertext-policy attribute-based encryption based cryptographic cloud storage
- Efficient revocation in ciphertext-policy attribute-based encryption based cryptographic cloud storage
- Frontiers of Information Technology & Electronic Engineering Vol. 14, Issue 2, Pages: 85-97(2013)
- Affiliations：
  
  School of Computer, National University of Defense Technology, Changsha 410073, China
- Author bio：
  
  [ "Yong CHENG, E-mail: ycheng@nudt.edu.cn" ]
- Funds：
- DOI：10.1631/jzus.C1200240
  CLC： TP309.2
- Received：12 August 2012，
  
  Revised：2013-;1-11，
  
  Published：2013-02
- Accepted：
Scan QR Code
Yong CHENG, Zhi-ying WANG, Jun MA, et al. Efficient revocation in ciphertext-policy attribute-based encryption based cryptographic cloud storage[J]. Frontiers of Information Technology & Electronic Engineering, 2013, 14(2): 85-97.
DOI：

Yong CHENG, Zhi-ying WANG, Jun MA, et al. Efficient revocation in ciphertext-policy attribute-based encryption based cryptographic cloud storage[J]. Frontiers of Information Technology & Electronic Engineering, 2013, 14(2): 85-97. DOI： 10.1631/jzus.C1200240.

摘要

Abstract

It is secure for customers to store and share their sensitive data in the cryptographic cloud storage. However

the revocation operation is a sure performance killer in the cryptographic access control system. To optimize the revocation procedure

we present a new efficient revocation scheme which is efficient

secure

and unassisted. In this scheme

the original data are first divided into a number of slices

and then published to the cloud storage. When a revocation occurs

the data owner needs only to retrieve one slice

and re-encrypt and re-publish it. Thus

the revocation process is accelerated by affecting only one slice instead of the whole data. We have applied the efficient revocation scheme to the ciphertext-policy attribute-based encryption (CP-ABE) based cryptographic cloud storage. The security analysis shows that our scheme is computationally secure. The theoretically evaluated and experimentally measured performance results show that the efficient revocation scheme can reduce the data owneros workload if the revocation occurs frequently.

关键词

Keywords

references

Amazon . . Amazon Simple Storage Service . . Available from , , 2012 . . http://aws.amazon.com/s3/ http://aws.amazon.com/s3/ , , [Accessed on June 11, 2012] . .

M. Backes , , , C. Cachin , , , A. Oprea . . Lazy Revocation in Cryptographic File Systems . . Proc. 3rd IEEE Int. Security in Storage Workshop , , 2005 . . p.1 - - 11 . . DOI: 10.1109/SISW.2005.7 http://doi.org/10.1109/SISW.2005.7 . .

J. Bethencourt , , , A. Sahai , , , B. Waters . . CiphertextPolicy Attribute-Based Encryption . . IEEE Symp. on Security and Privacy , , 2007 . . p.321 - - 334 . . DOI: 10.1109/SP.2007.11 http://doi.org/10.1109/SP.2007.11 . .

J. Bethencourt , , , A. Sahai , , , B. Waters . . CiphertextPolicy Attribute-Based Encryption . . Available from , , 2012 . . http://acsc.cs.utexas.edu/cpabe/ http://acsc.cs.utexas.edu/cpabe/ , , [Accessed on June 10, 2012] . .

B. Blanchet , , , A. Chaudhuri . . Automated Formal Analysis of a Protocol for Secure File Sharing on Untrusted Storage . . IEEE Symp. on Security and Privacy , , 2008 . . p.417 - - 431 . . DOI: 10.1109/SP.2008.12 http://doi.org/10.1109/SP.2008.12 . .

M. Blaze , , , G. Bleumer , , , M. Strauss . . Divertible protocols and atomic proxy cryptography . . LNCS , , 1998 . . 1403 127 - - 144 . . DOI: 10.1007/BFb0054122 http://doi.org/10.1007/BFb0054122 . .

D. Boneh , , , C. Gentry , , , B. Waters . . Collusion resistant broadcast encryption with short ciphertexts and private keys . . LNCS , , 2005 . . 3621 258 - - 275 . . DOI: 10.1007/11535218_16 http://doi.org/10.1007/11535218_16 . .

Vimercati S.D.C. di , , , S. Foresti , , , S. Jajodia , , , S. Paraboschi , , , P. Samarati . . Over-Encryption: Management of Access Control Evolution on Outsourced Data . . Proc. 33rd Int. Conf. on Very Large Data Bases , , 2007 . . p.123 - - 134 . . . .

S. Foresti . . Preserving Privacy in Data Outsourcing . . Springer. , , 2010 . . DOI: 10.1007/978-1-4419-7659-8 http://doi.org/10.1007/978-1-4419-7659-8 . .

R. Geambasu , , , T. Kohno , , , A. Levy , , , H.M. Levy . . Vanish: Increasing Data Privacy with Self-Destructing Data . . Proc. 18th USENIX Security Symp. , , 2009 . . p.299 - - 333 . . . .

V. Goyal , , , O. Pandey , , , A. Sahai , , , B. Waters . . Attribute-Based Encryption for Fine-Grained Access Control of Encrypted Data . . Proc. 13th ACM Conf. on Computer and Communications Security , , 2006 . . p.89 - - 98 . . DOI: 10.1145/1180405.1180418 http://doi.org/10.1145/1180405.1180418 . .

Hadoop . . HDFS Architecture Guide . . Available from , , 2012 . . http://hadoop.apache.org/docs/hdfs/current/hdfs_design.html http://hadoop.apache.org/docs/hdfs/current/hdfs_design.html , , [Accessed on June 28, 2012] . .

S. Jahid , , , P. Mittal , , , N. Borisov . . Easier: EncryptionBased Access Control in Social Networks with Efficient Revocation . . Proc. 6th ACM Symp. on Information, Computer and Communications Security , , 2011 . . p.411 - - 415 . . DOI: 10.1145/1966913.1966970 http://doi.org/10.1145/1966913.1966970 . .

S. Kamara , , , K. Lauter . . Cryptographic Cloud Storage . . Proc. 14th Int. Conf. on Financial Cryptography and Data Security , , 2010 . . p.136 - - 149 . . DOI: 10.1007/978-3-642-14992-4_13 http://doi.org/10.1007/978-3-642-14992-4_13 . .

A.G. Kumbhare , , , Y. Simmhan , , , V. Prasanna . . Designing a Secure Storage Repository for Sharing Scientific Datasets Using Public Clouds . . Proc. 2nd Int. Workshop on Data Intensive Computing in the Clouds , , 2011 . . p.31 - - 40 . . DOI: 10.1145/2087522.2087530 http://doi.org/10.1145/2087522.2087530 . .

A. Lewko , , , A. Sahai , , , B. Waters . . Revocation Systems with Very Small Private Keys . . IEEE Symp. on Security and Privacy , , 2010 . . p.273 - - 285 . . DOI: 10.1109/SP.2010.23 http://doi.org/10.1109/SP.2010.23 . .

X. Liang , , , Z. Cao , , , H. Lin , , , J. Shao . . Attribute Based Proxy Re-encryption with Delegating Capabilities . . Proc. 4th Int. Symp. on Information, Computer, and Communications Security , , 2009 . . p.276 - - 286 . . DOI: 10.1145/1533057.1533094 http://doi.org/10.1145/1533057.1533094 . .

B. Libert , , , D. Vergnaud . . Unidirectional chosenciphertext secure proxy re-encryption . . IEEE Trans. Inf. Theory , , 2011 . . 57 ( ( 3 ): ): 1786 - - 1802 . . DOI: 10.1007/978-3-540-78440-1_21 http://doi.org/10.1007/978-3-540-78440-1_21 . .

OpenSSL . . OpenSSL: Cryptography and SSL/TLS Toolkit . . Available from , , 2012 . . http://www.openssl.org/ http://www.openssl.org/ , , [Accessed on July 26, 2012] . .

J.S. Plank , , , S. Simmerman , , , C.D. Schuman . . Jerasure: a Library in C/C++ Facilitating Erasure Coding for Storage Applications, Version 1.2 . . Available from , , 2008 . . http://web.eecs.utk.edu/~plank/plank/papers/CS-08-627.html http://web.eecs.utk.edu/~plank/plank/papers/CS-08-627.html , , [Accessed on June 29, 2012] . .

M.O. Rabin . . Efficient dispersal of information for security, load balancing, and fault tolerance . . J. ACM , , 1989 . . 36 ( ( 2 ): ): 335 - - 348 . . DOI: 10.1145/62044.62050 http://doi.org/10.1145/62044.62050 . .

J.K. Resch , , , J.S. Plank . . AONT-RS: Blending Security and Performance in Dispersed Storage Systems . . Proc. 9th Usenix Conf. on File and Storage Technologies , , 2011 . . p.191 - - 202 . . . .

R. Rivest . . All-or-nothing encryption and the package transform . . LNCS , , 1997 . . 1267 210 - - 218 . . DOI: 10.1007/BFb0052348 http://doi.org/10.1007/BFb0052348 . .

A. Sahai , , , B. Waters . . Fuzzy identity-based encryption . . LNCS , , 2005 . . 3494 557 - - 557 . . DOI: 10.1007/11426639_27 http://doi.org/10.1007/11426639_27 . .

P. Samarati , , , Vimercati S.D.C. di . . Data Protection in Outsourcing Scenarios: Issues and Directions . . Proc. 5th ACM Symp. on Information, Computer and Communications Security , , 2010 . . p.1 - - 14 . . DOI: 10.1145/1755688.1755690 http://doi.org/10.1145/1755688.1755690 . .

A. Shamir . . How to share a secret . . Commun. ACM , , 1979 . . 22 ( ( 11 ): ): 612 - - 613 . . DOI: 10.1145/359168.359176 http://doi.org/10.1145/359168.359176 . .

M.W. Storer , , , K.M. Greenan , , , E.L. Miller , , , K. Voruganti . . Potshards: Secure Long-Term Storage without Encryption . . Proc. USENIX Annual Technical Conf. , , 2007 . . p.1 - - 11 . . . .

Y. Tang , , , P. Lee , , , J. Lui , , , R. Perlman . . Secure overlay cloud storage with access control and assured deletion . . IEEE Trans. Depend. Sec. Comput. , , 2012 . . 9 ( ( 6 ): ): 903 - - 916 . . DOI: 10.1109/TDSC.2012.49 http://doi.org/10.1109/TDSC.2012.49 . .

B. Waters . . Ciphertext-policy attribute-based encryption: an expressive, efficient, and provably secure realization . . LNCS , , 2011 . . 6571 53 - - 70 . . DOI: 10.1007/978-3-642-19379-8_4 http://doi.org/10.1007/978-3-642-19379-8_4 . .

L. Xu , , , X. Wu , , , X. Zhang . . CL-PRE: a Certificateless Proxy Re-encryption Scheme for Secure Data Sharing with Public Cloud . . Proc. 7th ACM Symp. on Information, Computer and Communications Security , , 2012 . . p.1 - - 10 . . . .

Z. Xu , , , K.M. Martin . . Dynamic User Revocation and Key Refreshing for Attribute-Based Encryption in Cloud Storage . . Proc. 11th Int. Conf. on Trust, Security and Privacy in Computing and Communications , , 2012 . . p.844 - - 849 . . DOI: 10.1109/TrustCom.2012.136 http://doi.org/10.1109/TrustCom.2012.136 . .

S. Yu , , , C. Wang , , , K. Ren , , , W. Lou . . Achieving Secure, Scalable, and Fine-Grained Data Access Control in Cloud Computing . . IEEE INFOCOM , , 2010a . . p.1 - - 9 . . DOI: 10.1109/INFCOM.2010.5462174 http://doi.org/10.1109/INFCOM.2010.5462174 . .

S. Yu , , , C. Wang , , , K. Ren , , , W. Lou . . Attribute Based Data Sharing with Attribute Revocation Proc. 5th ACM Symp. on Information . . Computer and Communications Security , , 2010b . . p.261 - - 270 . . DOI: 10.1145/1755688.1755720 http://doi.org/10.1145/1755688.1755720 . .

Views

Downloads

CSCD

Alert me when the article has been cited

Submit

Tools

Publicity Resources

No data

Related Author

Jian-zong WANG

Peter VARMAN

Chang-sheng XIE

Related Institution

School of Computer Science and Technology, Huazhong University of Science and Technology

Wuhan National Laboratory for Optoelectronics

Department of Electrical and Computer Engineering, Rice University

Chat

Address：Zhejiang University Press, 148 Tianmushan Road, Hangzhou, China Postal code：310028
Tel：+86-571-88273162 Email：fitee@zju.edu.cn
It is recommended to read the content of this site in Chrome&IE9+. Please switch to extreme mode in browser 360.
Cookies We use cookies to help provide and enhance our service and tailor content. By continuing, you agree to the use of cookies.

⁰