Achieving Simple, Secure and Efficient Hierarchical Access Control in Cloud Computing

IEEE Transactions on Computers

Volumn 65, Issue 7, 2016, Pages 2325-2331

  Tang, Shaohua ^a   Li, Xiaoyu ^a   Huang, Xinyi ^b   Xiang, Yang ^c   Xu, Lingling ^a  

^a SOUTH CHINA UNIVERSITY OF TECHNOLOGY   (China)

^b FUJIAN NORMAL UNIVERSITY   (China)

^c DEAKIN UNIVERSITY   (Australia)

Author keywords

Access control; hierarchical key assignment; linear geometry; pseudorandom function; strong key indistinguishability

Indexed keywords

CLOUD COMPUTING; CRYPTOGRAPHY; ECONOMIC AND SOCIAL EFFECTS; FINITE ELEMENT METHOD; VECTORS;

DYNAMIC KEY MANAGEMENTS; HIERARCHICAL ACCESS CONTROL; HIERARCHICAL KEY ASSIGNMENT; INDISTINGUISHABILITY; ITERATIVE COMPUTATION; LINEAR GEOMETRY; PSEUDO-RANDOM FUNCTIONS; SECURITY COMPONENTS;

ACCESS CONTROL;

EID: 84976264666     PISSN: 00189340     EISSN: None     Source Type: Journal    
DOI: 10.1109/TC.2015.2479609     Document Type: Article

References (36)

1. M. Armbrust, A. Fox, R. Griffith, A. D. Joseph, R. Katz, A. Konwinski, G. Lee, D. Patterson, A. Rabkin, I. Stoica, and M. Zaharia, "A view of cloud computing," Commun. ACM, vol. 53, no. 4, pp. 50-58, 2010.
2. K. Yang and X. Jia, "Data storage auditing service in cloud computing: Challenges, methods and opportunities," World Wide Web, vol. 15, no. 4, pp. 409-428, 2012.
3. S. Subashini and V. Kavitha, "A survey on security issues in service delivery models of cloud computing," J. Netw. Comput. Appl., vol. 34, no. 1, pp. 1-11, 2011.
4. K. Yang and X. Jia, "Expressive, efficient and revocable data access control for multi-authority cloud storage," IEEE Trans. Parallel Distrib. Syst., vol. 25, no. 7, pp. 1735-1744, Jul. 2014.
5. A. Sahai and B. Waters, "Fuzzy identity-based encryption," in Proc. 24th Annu. Int. Conf. Theory Appl. Cryptographic Techn., 2005, pp. 457-473.
6. J.-Y. Huang, C.-K. Chiang, and I.-E. Liao, "An efficient attribute-based encryption and access control scheme for cloud storage environment," in Proc. 8th Int. Conf. Grid Pervasive Comput., 2013, pp. 453-463.
7. Z. Wan, J. Liu, and R. H. Deng, "HASBE: A hierarchical attribute-based solution for flexible and scalable access control in cloud computing," IEEE Trans. Inf. Forensics Security, vol. 7, no. 2, pp. 743-754, Apr. 2012.
8. G. Wang, Q. Liu, and J. Wu, "Hierarchical attribute-based encryption for fine-grained access control in cloud storage services," in Proc. 17th ACM Conf. Comput. Commun. Security, 2010, pp. 735-737.
9. S. G. Akl and P. D. Taylor, "Cryptographic solution to a problem of access control in a hierarchy," ACM Trans. Comput. Syst., vol. 1, no. 3, pp. 239-248, 1983.
10. D. Huang and D. Medhi, "A secure group key management scheme for hierarchical mobile ad hoc networks," Ad Hoc Netw., vol. 6, no. 4, pp. 560-577, 2008.
11. B.-Z. He, C.-M. Chen, T.-Y. Wu, and H.-M. Sun, "An efficient solution for hierarchical access control problem in cloud environment," Math. Problems Eng., vol. 2014, p. 8, 2014.
12. Y.-W. Kao, K.-Y. Huang, H.-Z. Gu, and S.-M. Yuan, "uCloud: A user-centric key management scheme for cloud data protection," IET Inf. Security, vol. 7, no. 2, pp. 144-154, 2013.
13. Y. Zhang, X. Li, J. Liu, J. Yang, and B. Cui, "A secure hierarchical key management scheme in wireless sensor network," Int. J. Distrib. Sensor Netw., vol. 2012, p. 8, 2012.
14. H. Ragab Hassen, H. Bettahar, A. Bouadbdallah, and Y. Challal, "An efficient key management scheme for content access control for linear hierarchies," Comput. Netw., vol. 56, no. 8, pp. 2107-2118, 2012.
15. A. D. Santis, A. L. Ferrara, and B. Masucci, "Efficient provably-secure hierarchical key assignment schemes," Theoretical Comput. Sci., vol. 412, no. 41, pp. 5684-5699, 2011.
16. M. J. Atallah, M. Blanton, N. Fazio, and K. B. Frikken, "Dynamic and efficient key management for access hierarchies," ACM Trans. Inf. Syst. Security, vol. 12, no. 3, article 18, pp. 1-43, 2009.
17. V. R. Shen and T.-S. Chen, "A novel key management scheme based on discrete logarithms and polynomial interpolations," Comput. Security, vol. 21, no. 2, pp. 164-171, 2002.
18. X. Zou, Y. Karandikar, and E. Bertino, "A dynamic key management solution to access hierarchy," Int. J. Netw. Manage., vol. 17, no. 6, pp. 437-450, 2007.
19. A. D. Santis, A. L. Ferrara, and B. Masucci, "Cryptographic key assignment schemes for any access control policy," Inf. Process. Lett., vol. 92, no. 4, pp. 199-205, 2004.
20. I.-C. Lin, M.-S. Hwang, and C.-C. Chang, "A new key assignment scheme for enforcing complicated access control policies in hierarchy," Future Gener. Comput. Syst., vol. 19, no. 4, pp. 457-462, 2003.
21. E. Bertino, N. Shang, and S. S. Wagstaff, "An efficient time-bound hierarchical key management scheme for secure broadcasting," IEEE Trans. Dependable Secure Comput., vol. 5, no. 2, pp. 65-70, Apr.-Jun. 2008.
22. Y. F. Chung, H. H. Lee, F. Lai, and T. S. Chen, "Access control in user hierarchy based on elliptic curve cryptosystem," Inf. Sci., vol. 178, no. 1, pp. 230-243, 2008.
23. F.-G. Jeng and C.-M. Wang, "An efficient key-management scheme for hierarchical access control based on elliptic curve cryptosystem," J. Syst. Softw., vol. 79, no. 8, pp. 1161-1167, 2006.
24. Y.-L. Lin and C.-L. Hsu, "Secure key management scheme for dynamic hierarchical access control based on ECC," J. Syst. Softw., vol. 84, no. 4, pp. 679-685, 2011.
25. A. K. Das, N. R. Paul, and L. Tripathy, "Cryptanalysis and improvement of an access control in user hierarchy based on elliptic curve cryptosystem," Inf. Sci., vol. 209, pp. 80-92, 2012.
26. T.-S. Chen and J.-Y. Huang, "A novel key management scheme for dynamic access control in a user hierarchy," Appl. Math. Comput., vol. 162, no. 1, pp. 339-351, 2005.
27. W.-G. Tzeng, "A time-bound cryptographic key assignment scheme for access control in a hierarchy," IEEE Trans. Knowl. Data Eng., vol. 14, no. 1, pp. 182-188, Jan. 2002.
28. X. Yi and Y. Ye, "Security of Tzeng's time-bound key assignment scheme for access control in a hierarchy," IEEE Trans. Knowl. Data Eng., vol. 15, no. 4, pp. 1054-1055, Jul./Aug. 2003.
29. G. Ateniese, A. De Santis, A. L. Ferrara, and B. Masucci, "Provably-secure time-bound hierarchical key assignment schemes," J. Cryptol., vol. 25, no. 2, pp. 243-270, 2012.
30. Y.-R. Chen, C.-K. Chu, W.-G. Tzeng, and J. Zhou, "CloudHKA: A cryptographic approach for hierarchical access control in cloud computing," in Proc. 11th Int. Conf. Appl. Cryptography Netw. Security, 2013, pp. 37-52.
31. E. Freire, K. Paterson, and B. Poettering, "Simple, efficient and strongly KIsecure hierarchical key assignment schemes," in Proc. Cryptographers' Track RSA Conf., 2013, pp. 101-114.
32. T.-S. Chen and Y.-F. Chung, "Hierarchical access control based on Chinese remainder theorem and symmetric algorithm," Comput. Security, vol. 21, no. 6, pp. 565-570, 2002.
33. C.-L. Hsu and T.-S. Wu, "Cryptanalyses and improvements of two cryptographic key assignment schemes for dynamic access control in a user hierarchy," Comput. Security, vol. 22, no. 5, pp. 453-456, 2003.
34. S. Zhong and T. Lin, "A comment on the Chen-Chung scheme for hierarchical access control," Comput. Security, vol. 22, no. 5, pp. 450-452, 2003.
35. Y. Kim, A. Perrig, and G. Tsudik, "Simple and fault-tolerant key agreement for dynamic collaborative groups," in Proc. 7th ACM Conf. Comput. Commun. Security, 2000, pp. 235-244.
36. M. Bellare, R. Canetti, and H. Krawczyk, "Pseudorandom functions revisited: The cascade construction and its concrete security," in Proc. 37th Annu. Symp. Found. Comput. Sci., 1996, pp. 514-523.