Dynamic and Efficient Access Control Based On Function Encryption

Abstract

In terms of access control, no matter it is implemented as MAC (mandatory access control), RBAC (role-based access control), or ABE (traditional attribute-based encryption), a query table is inevitable which was proved not efficient enough to achieve real-time ownership certification. Moreover, security problems always accompany it such as authority management, user privacy, or table structure. Thereafter, we proposed a secure data access control strategy resorting to function encryption, exploiting inner product to actualize the proof of ownership. The most significant contribution of our scheme is to accomplish authentication and access control simultaneously employing computation instead of table query. Besides, the access control strategy can be more fine-grained with dynamic access rights, one-to-many mapping between the file and downloading rights, and also the functionality of downloading right transfer by dint of Rodrigues rotation transformation. Both the algorithm underpinning our scheme and the analysis of the correctness/sematic security will be completed depicted in the context. Experiment results illustrated that our strategy effectively improved the efficiency of ownership certification and reduced the overheads of both storage as well as communication for flexible access control.