A Practical and Efficient Bidirectional Access Control Scheme for Cloud-Edge Data Sharing
journal contributionposted on 2021-09-03, 11:28 authored by Jie Cui, Bei Li, Hong Zhong, Geyong Min, Yan Xu, Lu Liu
The cloud computing paradigm provides numerous tempting advantages, enabling users to store and share their data conveniently. However, users are naturally resistant to directly outsourcing their data to the cloud since the data often contain sensitive information. Although several fine-grained access control schemes for cloud-data sharing have been proposed, most of them focus on the access control of the encrypted data (e.g., restricting the decryption capabilities of the receivers). Distinct from the existing work, this article aims to address this challenging problem by developing a more practical bidirectional fine-grained access control scheme that can restrict the capabilities of both senders and receivers. To this end, we systematically investigate the access control for cloud data sharing. Inspired by the access control encryption (ACE), we propose a novel data sharing framework that combines the cloud side and the edge side. The edge server is located in the middle of all the communications, checking and preventing illegal communications according to the predefined access policy. Next, we develop an efficient access control algorithm by exploiting the attribute-based encryption and proxy re-encryption for the proposed framework. The experimental results show that our scheme exhibits superior performance in the encryption and decryption compared to the prior work.
National Natural Science Foundation of China (No. U1936220, No. 62011530046,No. 61872001)
Special Fund for Key Program of Science and Technology of Anhui Province, China (No.202003A05020043)
Open Fund for Discipline Construction
Institute of Physical Science and Information Technology, Anhui University.
CitationIEEE Transactions on Parallel and Distributed Systems ( Volume: 33, Issue: 2, Feb. 1 2022)
Author affiliationSchool of Informatics
- AM (Accepted Manuscript)