HASBE: A Hierarchical Attribute-Based Solution for Flexible and Scalable Access Control in Cloud Computing
HASBE: A Hierarchical Attribute-Based Solution for Flexible and Scalable Access Control in Cloud Computing
复制标题
DOI：
10.1109/tifs.2011.2172209
复制
发表时间：
2012-04
影响因子：
6.8
通讯作者：
Zhiguo Wan;Jun-e Liu;Robert H. Deng
中科院分区：
文献类型：
--
作者：
Zhiguo Wan;Jun-e Liu;Robert H. Deng
近年来，云计算已经成为IT行业最具影响力的范例之一。由于这种新的计算技术要求用户将其有价值的数据委托给云提供商，因此外包数据的安全和隐私问题越来越多。采用基于属性的加密（ABE）的方案已被提出用于云计算中的外包数据的访问控制，然而，他们中的大多数遭受在实现复杂的访问控制策略的可扩展性。为了实现云计算环境下外包数据的可扩展、灵活、细粒度的访问控制，通过对密文策略基于属性集的加密（ASBE）进行扩展，提出了一种分层用户结构的基于属性集的加密（HASBE）.该方案不仅实现了可扩展性，由于其层次结构，但也继承了灵活性和细粒度的访问控制，支持ASBE的复合属性。此外，HASBE采用多值分配的访问到期时间来处理用户撤销比现有的计划更有效。基于Bethencourt提出的密文策略属性加密（CP-ABE）方案的安全性，形式化地证明了HASBE的安全性，并分析了其性能和计算复杂度。我们实现了我们的计划，并表明它是有效的和灵活的处理在云计算外包数据的访问控制与全面的实验。
Cloud computing has emerged as one of the most influential paradigms in the IT industry in recent years. Since this new computing technology requires users to entrust their valuable data to cloud providers, there have been increasing security and privacy concerns on outsourced data. Several schemes employing attribute-based encryption (ABE) have been proposed for access control of outsourced data in cloud computing; however, most of them suffer from inflexibility in implementing complex access control policies. In order to realize scalable, flexible, and fine-grained access control of outsourced data in cloud computing, in this paper, we propose hierarchical attribute-set-based encryption (HASBE) by extending ciphertext-policy attribute-set-based encryption (ASBE) with a hierarchical structure of users. The proposed scheme not only achieves scalability due to its hierarchical structure, but also inherits flexibility and fine-grained access control in supporting compound attributes of ASBE. In addition, HASBE employs multiple value assignments for access expiration time to deal with user revocation more efficiently than existing schemes. We formally prove the security of HASBE based on security of the ciphertext-policy attribute-based encryption (CP-ABE) scheme by Bethencourt and analyze its performance and computational complexity. We implement our scheme and show that it is both efficient and flexible in dealing with access control for outsourced data in cloud computing with comprehensive experiments.