Towards differential access control and privacy-preserving for secure media data sharing in the cloud

Abstract

The development of cloud computing techniques has promoted the continuous sharing of a tremendous amount of media data. However, the involved parties in such processes usually share different or even conflicting benefits, causing non-orthogonal security concerns. The data owners worry about their private data being abused through illegal access or unauthorized redistribution by the requesters, while the latter ones are vulnerable to being profiled (e.g., interests, age) through their data access histories. Since most existing approaches address these problems individually, the security requirements of different roles cannot be properly satisfied. In this paper, we attempt to provide a joint effort that flexibly addresses the above security concerns. We first design a new cryptographic primitive (i.e., TFPRE-OT) by exploiting type-based proxy re-encryption for fine-grained sharing and oblivious transfer for hiding the access histories of data requesters. Using TFPRE-OT as the building block, a novel data sharing scheme is proposed to achieve differential access control and protect privacy disclosure in general cloud computing settings. We provide a thorough security analysis, showing that the proposed method can fulfill all desired security requirements. Finally, we validate the effectiveness of our design with both case studies and extensive experiments.