Dynamic Access Control Scheme Research Articles

SDACS: Blockchain-Based Secure and Dynamic Access Control Scheme for Internet of Things.

With the rapid growth of the Internet of Things (IoT), massive terminal devices are connected to the network, generating a large amount of IoT data. The reliable sharing of IoT data is crucial for fields such as smart home and healthcare, as it promotes the intelligence of the IoT and provides faster problem solutions. Traditional data sharing schemes usually rely on a trusted centralized server to achieve each attempted access from users to data, which faces serious challenges of a single point of failure, low reliability, and an opaque access process in current IoT environments. To address these disadvantages, we propose a secure and dynamic access control scheme for the IoT, named SDACS, which enables data owners to achieve decentralized and fine-grained access control in an auditable and reliable way. For access control, attribute-based control (ABAC), Hyperledger Fabric, and interplanetary file system (IPFS) were used, with four kinds of access control contracts deployed on blockchain to coordinate and implement access policies. Additionally, a lightweight, certificateless authentication protocol was proposed to minimize the disclosure of identity information and ensure the double-layer protection of data through secure off-chain identity authentication and message transmission. The experimental and theoretical analysis demonstrated that our scheme can maintain high throughput while achieving high security and stability in IoT data security sharing scenarios.

A dynamic data access control scheme for hierarchical structures in big data

Ciphertext-Policy Attribute-Based Encryption (CP-ABE) is a promising solution to address the issues of data leakage and sharing in big data. When multiple files are shared, they often have hierarchical access relationships. However, existing hierarchical data CP-ABE schemes can only support simple hierarchical access structures. The limitation arises, necessitating the generation of multiple access structures to meet hierarchical access requirements, resulting in the wastage of computational and storage resources. Therefore, in this paper, we carefully design a dynamic hierarchy access control that allows its level nodes to flexibly participate in the decryption of other nodes, enabling the realization of complex hierarchical data relationships. Building upon this, we construct the Attribute-based Dynamic Hierarchical data Access Control (ADHAC) scheme, achieving efficient and dynamic access control for multiple datasets. Subsequently, we apply our scheme in distributed computing, which enables efficient access control for individuals and institutions over multiple data sets and fine-grained computation. Security analysis indicates that our scheme can resist chosen plaintext attack (CPA). Both theoretical and experimental analyses demonstrate that our scheme has impressive advantages in terms of computational efficiency and storage costs compared to existing schemes.

A Dynamic Access Control Scheme with Conditional Anonymity in Socio-Meteorological Observation

<p>Socio-meteorological observation is an essential part of meteorological information construction, where unofficial organizations and individuals (volunteers) are employed to collect meteorological data. Thanks to the participation of social forces, the density and richness of meteorological data are improved significantly, and hence more economical and social benefits are brought. However, problems such as privacy leakage and data islands hamper the sustainable development of socio-meteorological observation. To solve the problems, we propose a dynamic access control scheme with conditional anonymity in socio-meteorological observation. In the proposed scheme, conditional anonymity of volunteers is supported. On the one hand, the real identity of each valid volunteer is private; On the other hand, the real identity of the malicious volunteers will be revealed if they attempt to inject erroneous meteorological data into the system. In addition, a lazy update mechanism is designed, where the fluidity of the volunteers and attribute revocation of the data users are fully considered. Finally, we compare the proposed scheme with similar schemes theoretically and experimentally.</p> <p> </p>

Retracted: On the Design of Secured and Reliable Dynamic Access Control Scheme of Patient E-Healthcare Records in Cloud Environment.

[This retracts the article DOI: 10.1155/2022/3804553.].

BPDAC: A Blockchain Based and Provenance Enabled Dynamic Access Control Scheme

BPDAC: A Blockchain Based and Provenance Enabled Dynamic Access Control Scheme

On the Design of Secured and Reliable Dynamic Access Control Scheme of Patient E-Healthcare Records in Cloud Environment.

Traditional healthcare services have changed into modern ones in which doctors can diagnose patients from a distance. All stakeholders, including patients, ward boy, life insurance agents, physicians, and others, have easy access to patients' medical records due to cloud computing. The cloud's services are very cost-effective and scalable, and provide various mobile access options for a patient's electronic health records (EHRs). EHR privacy and security are critical concerns despite the many benefits of the cloud. Patient health information is extremely sensitive and important, and sending it over an unencrypted wireless media raises a number of security hazards. This study suggests an innovative and secure access system for cloud-based electronic healthcare services storing patient health records in a third-party cloud service provider. The research considers the remote healthcare requirements for maintaining patient information integrity, confidentiality, and security. There will be fewer attacks on e-healthcare records now that stakeholders will have a safe interface and data on the cloud will not be accessible to them. End-to-end encryption is ensured by using multiple keys generated by the key conclusion function (KCF), and access to cloud services is granted based on a person's identity and the relationship between the parties involved, which protects their personal information that is the methodology used in the proposed scheme. The proposed scheme is best suited for cloud-based e-healthcare services because of its simplicity and robustness. Using different Amazon EC2 hosting options, we examine how well our cloud-based web application service works when the number of requests linearly increases. The performance of our web application service that runs in the cloud is based on how many requests it can handle per second while keeping its response time constant. The proposed secure access scheme for cloud-based web applications was compared to the Ethereum blockchain platform, which uses internet of things (IoT) devices in terms of execution time, throughput, and latency.

Dynamic fine-grained access control scheme for vehicular ad hoc networks

Secure communication in vehicular ad hoc networks (VANETs) has been extensively researched; however, access control in VANETs has not been studied adequately. Access control ensures that only authorized vehicles receive quality services over the VANETs to enhance the driving experience. Attribute-based encryption (ABE) with revocation is a promising access control technique that keeps data confidential and is suitable for application in VANETs. However, most existing revocable ABE schemes require the private keys of all non-revoked users to be updated if the private key of any user is revoked, which makes the implementation of such schemes extremely inefficient. In this paper, a dynamic fine-grained access control scheme based on ABE is proposed to ensure vehicle network security. It enables the message sender to determine which vehicles receive the message according to their attributes and can also freely revoke the decryption authorization of certain vehicles without needing to update all non-revoked keys. To the best of our knowledge, this is the first time that secure and efficient dynamic access control in VANETs has been achieved. Performance analysis and simulation evaluations have shown that the algorithm is more efficient in terms of computational delay and communication overhead, as compared with existing schemes.

Zero-Trust Based Distributed Collaborative Dynamic Access Control Scheme with Deep Multi-Agent Reinforcement Learning

Vast majority of organizations and companies strongly depend on intranet with access control to achieve security data accessibility and authorized resource sharing across departments and networks. However, traditional boundary defense has difficulty in mitigating the increasing

TABE-DAC: Efficient Traceable Attribute-Based Encryption Scheme With Dynamic Access Control Based on Blockchain

The features of decentralization and tamper-proof enable blockchain to be an emerging technology for integrity protection of important data stored on it. Blockchains are also used to combine with cloud storage for access control and sharing of private data. To protect the confidentiality of the private data, attribute-based encryption (ABE) schemes that can provide one-to-many encryption are commonly used as the solutions. However, there are problems, such as inefficiency, key abuse, and inflexibility of access control policy, when adopting ABE solutions. This paper proposes an efficient traceable attribute-based encryption with dynamic access control (TABE-DAC) scheme based on blockchain for fine-grained sharing of encrypted private data on cloud. The proposed TABE-DAC scheme supports traceability for the accountability of malicious users who leak the private key. The proposed solution also realizes dynamic access control where data owners have the flexibility to update access control policy. We also prove the security of the proposed TABE-DAC scheme. Finally, through theoretical comparison and experimental analysis, we verify the efficiency of the proposed solution.

DF-RBAC: Dynamic and Fine-grained Role-Based Access Control Scheme with Smart Contract

Access control is a technology that can guarantee the security of information in network transmission, in which role-based access control is to separate the subject from the permission, and to assign the permission by distributing the corresponding role of the user. However, the traditional role-based access control scheme is generally centralized, the allocation of user’s role lacks fine granularity, and there is static in the allocation of the role and permission, which is not consistent with the distributed and dynamic network architecture nowadays. Hence, we propose a dynamic and fine-grained role-based access control model DF-RBAC, which can realize the flexible assignment of roles by resource owners and security verification of assigned roles. Further, we take advantage of blockchain technology and cryptography technology to combine with the DF-RBAC framework to achieve access to the activity log security audit function, which can ensure the security of the overall architecture. By safety and experimental analysis, our framework has proved to be feasible.

A dynamic and hierarchical access control for IoT in multi-authority cloud storage

Internet-of-Things (IoT) is massively growing and introducing several benefits that are able to transform the world. Also, cloud computing has become significantly important due to its ability to handle large sets of data. IoT and cloud computing present a stalwart combination that can enrich several analytics and applications. Nevertheless, cloud data security and users privacy can have gaps. Especially when the IoT and cloud systems deal with a dynamically behaving users within a centralized and costly environment. Therefore, there is an urgent need for a dynamic access control scheme that considers the users’ behavior while making the access control decisions within a reasonable time. In this paper, we introduce a Multi-Dimensional Access Control (MD-AC) scheme for dynamically authorizing and revoking users in the cloud with multiple authorities. The experimental results indicate that MD-AC can evaluate access requests within reasonable and acceptable processing times. By considering very hard experimental conditions and numerous transactions, the average encryption and decryption times are 18 and 10 ms respectively. Furthermore, the proposed scheme is validated and compared with recent state-of-art schemes. The results demonstrate that the proposed scheme is fast and robust against different well-known attacks. Moreover, MD-AC can be used for keeping the privacy of IoT services over the cloud environment.

Dynamic Access Control Scheme for Personal Health Record in Cloud Computing

Presently, usage of Cloud computing is increasing, due to internet availability most of Personal Health Record (PHR) owners outsourcing their records to the cloud, but it is untrusted, so a security mechanism needed in this paper proposing Dynamic Time-based encryption (DTBE), it derived from classic ABE. In the past, many researchers suggested different access controls for secure PHR. Still, most of the access control mechanisms introduce burden to the PHR owner while performing dynamic operations insertion, PHR user revocation, and when it updates, PHR users attribute list. Most of the ABE schemes have several limitations as it cannot efficiently handle adding or revoking users or identity attributes. It needs to keep multiple encrypted copies of the same key that incurs high computational costs. So, there is a need for a suitable access control mechanism that should support effective policies.

Secured Information Sharing in Mobile Cloud Computing using Access Controls

Presently usage of smart mobiles increasing, due to internet availability most of users outsourcing their data to cloud but it is untrusted, so a security mechanism needed in this work proposing Homomorphic cipher text policy-Attribute based encryption (HCP-ABE), it derived from classic ABE. “Mobile cloud computing are combinations of mobile computing and cloud computing”, mobile applications are designed and hosted in cloud computing without verifying about mobile environment. Security models are constructed using Perturbation methods as per literature. These models are not secure compared to cryptographic techniques. When perturbation methods are used, Data reconstruction becomes a significant challenge. Hence computations are complicated to perform. Furthermore, this method suffers a trade-off between accuracy and privacy and most of the research work focused on key management issues and static access policies but due to user dynamic the access control mechanism should design for proactive strategies. To support dynamic access control and operations HCP-ABE scheme intended. In this paper we identify challenges associated with mobile cloud-based security system and possible provide solutions to understand existing research work conducting compressive review on different access control mechanisms.

BENBI: Scalable and Dynamic Access Control on the Northbound Interface of SDN-Based VANET

Recently, emerging SDN-based VANET (i.e., vehicular ad hoc network based on software-defined networking) enables VANET management to be programmable and flexible. It introduces SDN controllers to maintain network-wide resources and SDN applications to program configurations through arbitrarily accessing resources via the northbound interface (NBI). However, this brings with it security issues on the NBI, such as network-wide resource exposure and configuration manipulation. Most of the existing works employed permission systems to restrict resource access; these solutions are generally controller-dependent, which means controller codes need to be modified for giving access permissions to external applications. In this paper, we propose a scalable and dynamic access control scheme on the NBI for SDN-based VANET, named BENBI. In the proposed scheme, we dynamically and flexibly control network resources by employing broadcast encryption, rather than altering source codes of the controller or updating permission lists with various degrees of granularity. Moreover, the resources are encrypted during transmission so that they are only available to authorized applications. Finally, we implement a prototype of BENBI. The experimental results demonstrate that the cost of allocating secret keys is independent of the number of SDN entities being appointed, which indicates the scalability of our scheme.

High Secure and dynamic Access Control Scheme for Big Data Storage in Cloud Environment

High Secure and dynamic Access Control Scheme for Big Data Storage in Cloud Environment

An efficient dynamic access control scheme for distributed wireless sensor networks

An efficient dynamic access control scheme for distributed wireless sensor networks

Access control mechanisms for outsourced data in public cloud using polynomial interpolation and multilinear map

Outsourcing the user's sensitive data on to honest-but-curious cloud storage servers pose several data security and access control challenges. Single key and multi-key encryption strategies to protect the data require data owner participation for providing access to data and management of multiple keys by users. To reduce the key management at the users and to remove data owner's participation during data accesses, we propose three access control schemes: 1) based on the principle of polynomial interpolation; 2) using multilinear map; 3) dynamic access control scheme using multilinear map. The security of multilinear map based schemes relies on the multilinear Diffie-Hellman assumption. The key generated for data encryption is regulated by the access authorisations holding on the data. In all the proposed schemes, the authorised user needs to store only one key irrespective of the number of data items to which the user has authorised access and do not require the data owner's participation except in grant and revoke operations.

Access control mechanisms for outsourced data in public cloud using polynomial interpolation and multilinear map

Outsourcing the user's sensitive data on to honest-but-curious cloud storage servers pose several data security and access control challenges. Single key and multi-key encryption strategies to protect the data require data owner participation for providing access to data and management of multiple keys by users. To reduce the key management at the users and to remove data owner's participation during data accesses, we propose three access control schemes: 1) based on the principle of polynomial interpolation; 2) using multilinear map; 3) dynamic access control scheme using multilinear map. The security of multilinear map based schemes relies on the multilinear Diffie-Hellman assumption. The key generated for data encryption is regulated by the access authorisations holding on the data. In all the proposed schemes, the authorised user needs to store only one key irrespective of the number of data items to which the user has authorised access and do not require the data owner's participation except in grant and revoke operations.

Dynamic Access and Power Control Scheme for Interference Mitigation in Femtocell Networks

The femtocell network, which is designed for low power transmission and consists of consumer installed small base stations, coexists with macrocells to exploit spatial reuse gain. For its realization, cross-tier interference mitigation is an important issue. To solve this problem, we propose a joint access and power control scheme that requires limited information exchange between the femto and macro networks. Our objective is to maximize the network throughput while satisfying each users quality of service (QoS) requirement. To accomplish this, we first introduce two distributed interference detection schemes, i.e., the femto base station and macro user equipment based schemes. Then, the proposed scheme dynamically adjusts the transmission power and makes a decision on the access mode of each femto base station. Through extensive simulations, we show that the proposed scheme outperforms earlier works in terms of the throughput and outage probability.

Dynamic Access Control Mechanism Based on Credibility

In this paper, combining the existing dynamic access control model based on trust with the dynamic measurement technique, we propose a dynamic access control scheme based on credibility. By the simulation test, the mechanism can prevent the malicious behavior of malicious nodes.