An efficient attribute-based hierarchical data access control scheme in cloud computing

Heng He,Li Huang,Peng Li,Li Deng,Xiang Chen,Liang-han Zheng

doi:10.1186/s13673-020-00255-5

Abstract

Security issues in cloud computing have become a hot topic in academia and industry, and CP-ABE is an effective solution for managing and protecting data. When data is shared in cloud computing, they usually have multiple access structures that have hierarchical relationships. However, existing CP-ABE algorithms do not consider such relationships and just require data owners to generate multiple ciphertexts to meet the hierarchical access requirement, which would incur substantial computation overheads. To achieve fine-grained access control of multiple hierarchical files effectively, first we propose an efficient hierarchical CP-ABE algorithm whose access structure is linear secret sharing scheme. Moreover, we construct an attribute-based hierarchical access control scheme, namely AHAC. In our scheme, when a data visitor’s attributes match a part of the access control structure, he can decrypt the data that associate with this part. The experiments show that AHAC has good security and high performance. Furthermore, when the quantity of encrypted data files increases, the superiority of AHAC will be more significant.

Highlights

The advent of the mobile Internet era has brought data sharing into people’s daily life, and the relevant platforms are widely used, like Facebook, Badoo and MySpace
It should be noticed that in our scheme, we focus on the issue of hierarchical access relationships of multiple shared files, which is the same as [8]
Preliminaries First of all, we present the related preliminaries of Attribute-based Hierarchical data Access Control scheme (AHAC), we describe an example of using these techniques to implement hierarchical access control, and last we give the definition of d-Parallel Decisional q-parallel Bilinear Diffie-Hellman Exponent (BDHE)

Summary

Introduction

The advent of the mobile Internet era has brought data sharing into people’s daily life, and the relevant platforms are widely used, like Facebook, Badoo and MySpace. Multiple hierarchical access control structures of data files are integrated into a single LSSS matrix, so all the data are encrypted into an entire ciphertext. (2) Based on the proposed CP-ABE algorithm, we construct an Attribute-based Hierarchical data Access Control scheme (AHAC) in the cloud computing.

Results

Conclusion