Earticle

초록

영어

Ciphertext-Policy Attribute-Based Encryption (CP-ABE) is a promising cryptographic tool to implement access control for secure cloud storage systems. However, most existing access control schemes based on CP-ABE for the multi-authority cloud storage systems rely on a fully trusted global certificate authority. It is just an ideal assumption while there never exists a fully trusted global certificate authority in reality. In this paper, we construct a system with multiple certificate authorities (CA). The parameters of those CAs could be verified when an authority suspects the messages received from the correlative certificate authority. Besides, we construct a verifiable secret sharing (VSS) scheme to realize the decentralization of the certificate authority in our scheme. The scheme adopts the Pedersen commitment in combination with the properties of bilinear-pairs on elliptic curve and bilinear Diffie-Hellman problem. The analysis shows that our scheme is highly efficient, authentic and provably secure under the security model. Our scheme simultaneously supports efficient attribute revocation.

목차

Abstract
 1. Introduction
  1.1. Related Work
  1.2. Organization
 2. Preliminaries
  2.1. Bilinear Pairings
  2.2. Diffie-Hellman Problem
  2.3. Pedersen Commitment
 3. System and Security Model
  3.1. System Model
  3.2. Security Model
 4. Attributed-based Access Control with Multiple Certificate Authorities
  4.1 A verifiable Secret sharing scheme based on bilinear-pairs
  4.2 Construction of the Proposed Access Control Scheme
 5. Analysis of Our Scheme
  5.1 Security Analysis
  5.2 Performance Analysis
 6. Conclusion
 References

키워드

저자

• Lin Xin [ School of Computer and Software & Jiangsu Engineering Center of Network Monitoring, Nanjing University of Information Science and Technology, Nanjing, 210044, China ]
• Xingming Sun [ School of Computer and Software & Jiangsu Engineering Center of Network Monitoring, Nanjing University of Information Science and Technology, Nanjing, 210044, China ]
• Zhangjie Fu [ School of Computer and Software & Jiangsu Engineering Center of Network Monitoring, Nanjing University of Information Science and Technology, Nanjing, 210044, China ]
• Liang-Ao Zhang [ School of Computer and Software & Jiangsu Engineering Center of Network Monitoring, Nanjing University of Information Science and Technology, Nanjing, 210044, China ]
• Jie Xi [ School of Computer and Software & Jiangsu Engineering Center of Network Monitoring, Nanjing University of Information Science and Technology, Nanjing, 210044, China ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Security and Its Applications

• 간기

  격월간

• pISSN

  1738-9976

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605