Flexible and Fine-Grained Attribute-Based Data Storage in Cloud Computing

    Research output: Contribution to journalArticle


    View graph of relations

    With the development of cloud computing, outsourcing data to cloud server attracts lots of attentions. To guarantee the security and achieve flexibly fine-grained file access control, attribute based encryption (ABE) was proposed and used in cloud storage system. However, user revocation is the primary issue in ABE schemes. In this article, we provide a ciphertext-policy attribute based encryption (CP-ABE) scheme with efficient user revocation for cloud storage system. The issue of user revocation can be solved efficiently by introducing the concept of user group. When any user leaves, the group manager will update users' private keys except for those who have been revoked. Additionally, CP-ABE scheme has heavy computation cost, as it grows linearly with the complexity for the access structure. To reduce the computation cost, we outsource high computation load to cloud service providers without leaking file content and secret keys. Notably, our scheme can withstand collusion attack performed by revoked users cooperating with existing users. We prove the security of our scheme under the divisible computation Diffie-Hellman assumption. The result of our experiment shows computation cost for local devices is relatively low and can be constant. Our scheme is suitable for resource constrained devices.


    Original languageUndefined/Unknown
    Number of pages12
    Pages (from-to)785-796
    JournalIEEE Transactions on Services Computing
    Journal publication date22 Jan 2016
    Issue number5
    Publication statusPublished - 22 Jan 2016
    Externally publishedYes

    ID: 168530544