Encryption Scheme For Cloud Storage Research Articles

Efficient and accountable anti-leakage attribute-based encryption scheme for cloud storage

To ensure secure and flexible data sharing in cloud storage, attribute-based encryption (ABE) is introduced to meet the requirements of fine-grained access control and secure one-to-many data sharing. However, the computational burden imposed by attribute encryption renders it unsuitable for resource-constrained environments such as the Internet of Things (IoT) and edge computing. Furthermore, the issue of accountability for illegal keys is crucial, as authorized users may actively disclose or sell authorization keys for personal gain, and keys may also passively leak due to management negligence or hacking incidents. Additionally, since all authorization keys are generated by the attribute authorization center, there is a potential risk of unauthorized key forgery. In response to these challenges, this paper proposes an efficient and accountable leakage-resistant scheme based on attribute encryption. The scheme adopts more secure online/offline encryption mechanisms and cloud server-assisted decryption to alleviate the computational burden on resource-constrained devices. For illegal keys, the scheme supports accountability for both users and the authorization center, allowing the revocation of decryption privileges for malicious users. In the case of passively leaked keys, timely key updates and revocation of decryption capabilities for leaked keys are implemented. Finally, the paper provides selective security and accountability proofs for the scheme under standard models. Efficiency analysis and experimental results demonstrate that the proposed scheme enhances encryption/decryption efficiency, and the storage overhead for accountability is also extremely low.

Forward and backward secure updatable ElGamal encryption scheme for cloud storage

Updatable encryption can support key/ciphertext update functionality, resist key compromise attacks, and be applicable to cloud storage. However, as a type of partitioning strategy, leakage sets or firewalls technique has been adopted by the existing updatable encryption schemes to build a relaxed security model, which forbids the adversary from querying the secret key at the challenge-equal epochs and hardly captures forward and backward security. In this paper, an enhanced security model can be built by considering a corruption oracle that allows any secret key query without requiring leakage sets. Then we utilize the indistinguishability obfuscation technique of the punctured program to construct an updatable ElGamal encryption scheme with no-directional key update and uni-directional ciphertext update. Furthermore, under the framework of the enhanced security model, the proposed scheme is proven to be IND-CPA. Finally, by comparison with the existing updatable encryption schemes, the proposed scheme eliminates leakage sets and firewalls, and can achieve both forward and backward security.

Design and development of a secure certificateless proxy signature based (SE-CLPS) encryption scheme for cloud storage

Certificateless Public Key Cryptography (CL-PKC) scheme is a new standard that combines Identity (ID)-based cryptography and tradi- tional PKC. It yields better security than the ID-based cryptography scheme without requiring digital certificates. In the CL-PKC scheme, as the Key Generation Center (KGC) generates a public key using a partial secret key, the need for authenticating the public key by a trusted third party is avoided. Due to the lack of authentication, the public key associated with the private key of a user may be replaced by anyone. Therefore, the ciphertext cannot be decrypted accurately. To mitigate this issue, an Enhanced Certificateless Proxy Signature (E-CLPS) is proposed to offer high security guarantee and requires minimum computational cost. In this work, the Hackman tool is used for detecting the dictionary attacks in the cloud. From the experimental analysis, it is observed that the proposed E-CLPS scheme yields better Attack Detection Rate, True Positive Rate, True Negative Rate and Minimum False Positives and False Negatives than the existing schemes.

A Lattice Attribute-Based Encryption Scheme for Cloud Storage Based on R-LWE Problem

Attribute-Based Encryption (ABE) is generally applied on Cloud Storage to ensure the security and efficient access control of uploaded data. However, with the development of quantum computing, Diffie-Hellman Problem and Discrete Logarithm Problem, which all ABE scheme based on, have been solved. Therefore, anti-quantum ABE schemes become a research hotspot. However, current anti-quantum ABE schemes cannot make attribute revocation. In order to solve these problems, we propose a lattice attribute-based encryption scheme for cloud storage based on R-LWE problem (L-ABE). Firstly, we construct public/secret key pairs based on the hardness of Ring Learning with Error problem (R-LWE) to achieve quantum attack resistance effectively. Secondly, our scheme can achieve attribute revocation to ensure fine-grained access control. Finally, we prove that our scheme can resist chosen plaintext attack.

Verifiable and multi-keyword searchable attribute-based encryption scheme for cloud storage

verifiable and multi-keyword searchable attribute-based encryption scheme for cloud storage

Audit-Free Cloud Storage via Deniable Attribute-Based Encryption

Cloud storage services have become increasingly popular. Because of the importance of privacy, many cloud storage encryption schemes have been proposed to protect data from those who do not have access. All such schemes assumed that cloud storage providers are safe and cannot be hacked; however, in practice, some authorities (i.e., coercers) may force cloud storage providers to reveal user secrets or confidential data on the cloud, thus altogether circumventing storage encryption schemes. In this paper, we present our design for a new cloud storage encryption scheme that enables cloud storage providers to create convincing fake user secrets to protect user privacy. Since coercers cannot tell if obtained secrets are true or not, the cloud storage providers ensure that user privacy is still securely protected.

Time‐bound key‐aggregate encryption for cloud storage

AbstractHandling huge loads of data that are subject to change within every second, cloud storage services are facing the challenge of properly dealing with the problem of user legality management while making sure that the services are conveniently user‐friendly. Ideally, the concept of attribute‐based encryption should be applied, meaning that data should be able to be encrypted using some specific attributes before it is uploaded to cloud, so that fine access control is possible. However, in a traditional attribute‐based encryption scheme, the user typically needs to have different attribute‐based keys for the decryption of various pieces of data downloaded, which really is a lot of trouble. To solve this problem, the idea of key‐aggregate cryptosystem has been brought up. With key‐aggregate cryptosystem, the user gets to use one single aggregate key to decrypt data that match all the attributes specified by the user. In addition, in some cases of cloud data usage, we as users might not exactly want to share our cloud data with others 24 h a day and for as long as it gets. Therefore, in this paper, we shall propose a time‐bound key‐aggregate encryption scheme for cloud storage, together with the results of some comparisons as well as correctness and security analyses we have made to prove the superiority of our new scheme over related works. Not only will our new scheme take the burden of maintaining the attribute‐based keys off the user, but it will also provide satisfactory confidentiality and security for cloud data in a more efficient way. Copyright © 2016 John Wiley & Sons, Ltd.

A Cloud Storage Encryption Scheme Based on Separated Key and Encryption Policy

With the continuous expansion of the scale data storage, cloud storage technology for its high performance and low cost to get a lot of attention and support. However, the security issues of cloud storage data hinder its further promotion. For the current cloud storage applications of data stored encrypted, a cloud storage encryption scheme based on the separated key and encryption policy is proposed. By strengthening the data encryption key management and data encryption algorithm, the system achieves a more secure storage of data assurance in the technical level.