Realizing Fine-Grained and Flexible Access Control to Outsourced Data with Attribute-Based Cryptosystems
Realizing Fine-Grained and Flexible Access Control to Outsourced Data with Attribute-Based Cryptosystems
复制标题
DOI：
10.1007/978-3-642-21031-0_7
复制
发表时间：
2011-05
期刊：
影响因子：
--
通讯作者：
Fangming Zhao;T. Nishide;K. Sakurai
中科院分区：
文献类型：
--
作者：
Fangming Zhao;T. Nishide;K. Sakurai
我们考虑构建安全云存储服务的问题，用户将敏感数据外包给该服务以便与他人共享，特别是在服务提供商不完全受到客户信任的情况下。云存储服务表示向瘦客户机和方便地集中提供计算和存储资源的架构转变。在利用云存储进行安全数据共享时，这种体系结构的主要激励问题之一是为瘦客户机提供强大的数据机密性和灵活的细粒度访问控制，而不会对它们（客户机）施加额外的成本。为了实现这一目标，我们结合并利用两种最新的基于属性的加密技术，即基于属性的加密（ABE）和基于属性的签名（ABS），提出了一种新的数据共享协议。此外，我们还详细比较了我们的方案与几个最新的现有方案。
We consider the problem of constructing a secure cloud storage service to which users outsource sensitive data for sharing with others where, in particular, the service provider is not completely trusted by the customer. Cloud storage service denotes an architectural shift toward thin clients and conveniently centralized provision of both computing and storage resources. When utilizing cloud storage for secure data sharing, one of the main motivating problems of this architecture is providing thin clients with both strong data confidentiality and flexible fine-grained access control without imposing additional cost on them (clients). To achieve this goal, we propose a novel data sharing protocol by combining and exploiting two of the latest attribute based cryptographic techniques,attribute-based encryption (ABE)andattribute-based signature (ABS). Furthermore, we also give a detailed comparison of our scheme with several latest existing schemes.