HASBE: A hierarchical attribute-based solution for flexible and scalable access control in cloud computing

IEEE Transactions on Information Forensics and Security

Volumn 7, Issue 2, 2012, Pages 743-754

  Wan, Zhiguo ^a   Liu, Jun'e ^a   Deng, Robert H ^b  

^a TSINGHUA UNIVERSITY   (China)

^b SINGAPORE MANAGEMENT UNIVERSITY   (Singapore)

Author keywords

Access control; cloud computing; data security

Indexed keywords

ACCESS CONTROL; CLOUD COMPUTING; NETWORK FUNCTION VIRTUALIZATION; SECURITY OF DATA;

ACCESS CONTROL POLICIES; ATTRIBUTE-BASED ENCRYPTIONS; CIPHERTEXT POLICIES; CIPHERTEXT-POLICY ATTRIBUTE-BASED ENCRYPTIONS; COMPUTING TECHNOLOGY; HIERARCHICAL ATTRIBUTES; HIERARCHICAL STRUCTURES; SECURITY AND PRIVACY;

CRYPTOGRAPHY;

EID: 84863392301     PISSN: 15566013     EISSN: None     Source Type: Journal    
DOI: 10.1109/TIFS.2011.2172209     Document Type: Article

References (21)

1. R. Buyya, C. ShinYeo, J. Broberg, and I. Brandic, "Cloud computing and emerging it platforms: Vision, hype, and reality for delivering computing as the 5th utility," Future Generation Comput. Syst., vol. 25, pp. 599-616, 2009.
2. Amazon Elastic Compute Cloud (Amazon EC2) [Online]. Available: http://aws.amazon.com/ec2/
3. Amazon Web Services (AWS) [Online]. Available: https://s3.amazonaws.com/
4. R. Martin, "IBM brings cloud computing to earth with massive new data centers," InformationWeek Aug. 2008 [Online]. Available: http://www.informationweek.com/news/hardware/data-centers/209901523
5. Google App Engine [Online]. Available: http://code.google.com/appengine/
6. K. Barlow and J. Lane, "Like technology from an advanced alien culture: Google apps for education at ASU," in Proc. ACM SIGUCCS User Services Conf., Orlando, FL, 2007.
7. B. Barbara, "Salesforce.com: Raising the level of networking," Inf. Today, vol. 27, pp. 45-45, 2010.
8. J. Bell, Hosting EnterpriseData in the Cloud-Part 9: InvestmentValue Zetta, Tech. Rep., 2010.
9. A. Ross, "Technical perspective: A chilly sense of security," Commun. ACM, vol. 52, pp. 90-90, 2009.
10. D. E. Bell and L. J. LaPadula, Secure Computer Systems: Unified Exposition and Multics Interpretation The MITRE Corporation, Tech. Rep., 1976.
11. K. J. Biba, Integrity Considerations for Secure Computer Sytems The MITRE Corporation, Tech. Rep., 1977.
12. H. Harney, A. Colgrove, and P. D. McDaniel, "Principles of policy in secure groups," in Proc. NDSS, San Diego, CA, 2001.
13. P. D. McDaniel and A. Prakash, "Methods and limitations of security policy reconciliation," in Proc. IEEE Symp. Security and Privacy, Berkeley, CA, 2002.
14. T. Yu and M. Winslett, "A unified scheme for resource protection in automated trust negotiation," in Proc. IEEE Symp. Security and Privacy, Berkeley, CA, 2003.
15. J. Li, N. Li, and W. H. Winsborough, "Automated trust negotiation using cryptographic credentials," in Proc. ACM Conf. Computer and Communications Security (CCS), Alexandria, VA, 2005.
16. V. Goyal, O. Pandey, A. Sahai, and B.Waters, "Attibute-based encryption for fine-grained access control of encrypted data," in Proc. ACM Conf. Computer and Communications Security (ACM CCS), Alexandria, VA, 2006.
17. S. Yu, C. Wang, K. Ren, and W. Lou, "Achiving secure, scalable, and fine-grained data access control in cloud computing," in Proc. IEEE INFOCOM 2010, 2010, pp. 534-542.
18. J. Bethencourt, A. Sahai, and B. Waters, "Ciphertext-policy attributebased encryption," in Proc. IEEE Symp. Security and Privacy, Oakland, CA, 2007.
19. R. Bobba, H. Khurana, and M. Prabhakaran, "Attribute-sets: A practically motivated enhancement to attribute-based encryption," in Proc. ESORICS, Saint Malo, France, 2009.
20. A. Sahai and B. Waters, "Fuzzy identity based encryption," in Proc. Acvances in Cryptology-Eurocrypt, 2005, vol. 3494, LNCS, pp. 457-473.
21. G.Wang, Q. Liu, and J.Wu, "Hierachical attibute-based encryption for fine-grained access control in cloud storage services," in Proc. ACM Conf. Computer and Communications Security (ACM CCS), Chicago, IL, 2010.