Flexible Data Access Control Based on Trust and Reputation in Cloud Computing

IEEE Transactions on Cloud Computing

Volumn 5, Issue 3, 2017, Pages 485-498

  Yan, Zheng ^a,b   Li, Xueyun ^a,b   Wang, Mingjun ^a   Vasilakos, Athanasios V ^c  

^a XIDIAN UNIVERSITY   (China)

^b AALTO UNIVERSITY   (Finland)

^c LULEÅ UNIVERSITY OF TECHNOLOGY   (Sweden)

Author keywords

access control; cloud computing; reputation; Trust

Indexed keywords

CLOUD COMPUTING; CRYPTOGRAPHY; DIGITAL STORAGE; NETWORK FUNCTION VIRTUALIZATION; TRUSTED COMPUTING;

CLOUD SERVICE PROVIDERS; CRYPTOGRAPHIC SYSTEMS; PROXY RE ENCRYPTIONS; REPUTATION; SECURITY AND PERFORMANCE; TRUST; TRUST AND REPUTATION; TRUSTED THIRD PARTIES;

ACCESS CONTROL;

EID: 85030113648     PISSN: None     EISSN: 21687161     Source Type: Journal    
DOI: 10.1109/TCC.2015.2469662     Document Type: Article

References (39)

1. R. Chow et al., "Controlling data in the cloud: Outsourcing computation without outsourcing control, " in Proc. ACM Workshop Cloud Comput. Security, 2009, pp. 85-90.
2. S. Kamara and K. Lauter, "Cryptographic cloud storage, " in Proc. 14th Int. Conf. Financial Cryptography Data Security, 2010, pp. 136-149.
3. Q. Liu, C. Tan, J. Wu, and G. Wang, "Efficient information retrieval for ranked queries in cost-effective cloud environments, " in Proc. IEEE INFOCOM, 2012, pp. 2581-2585.
4. M. Kallahalla et al., "Plutus: Scalable secure file sharing on untrusted storage, " in Proc. USENIX Conf. File Storage Technol, 2003, pp. 29-42.
5. E. Goh, H. Shacham, N. Modadugu, and D. Boneh, "Sirius: Securing remote untrusted storage, " in Proc. Netw. Distrib. Syst. Security Symp., 2003, pp. 131-145.
6. J. Bethencourt, A. Sahai, and B. Waters, "Ciphertext-policy attribute based encryption, " in Proc. IEEE Symp. Security Privacy, 2007, pp. 321-334.
7. V. Goyal, O. Pandey, A. Sahai, and B. Waters, "Attribute-based encryption for fine-grained access control of encrypted data, " in Proc. 13th ACM Conf. Comput. Commun. Security, 2006, pp. 89-98.
8. S. Muller, S. Katzenbeisser, and C. Eckert, "Distributed attributebased encryption, " in Proc. 11th Annu. Int. Conf. Inf. Security Cryptol., 2008, pp. 20-36.
9. A. Sahai and B. Waters, "Fuzzy identity-based encryption, " in Proc. 24th Int. Conf. Theory Appl. Cryptographic Techn., 2005, pp. 457-473.
10. M. Pirretti, P. Traynor, P. McDaniel, and B. Waters, "Secure attribute based systems, " J. Comput. Security, vol. 18, no. 5, pp. 799-837, 2010.
11. M. Blaze, G. Bleumer, and M. Strauss, "Divertible protocols and atomic proxy cryptography, " in Proc. Int. Conf. Theory Appl. Cryptographic Techn., 1998, pp. 127-144.
12. M. Green and G. Ateniese, "Identity-based proxy re-encryption, " in Proc. 5th Int. Conf. Appl. Cryptography Netw. Security, 2007, pp. 288-306.
13. S. Yu, C. Wang, K. Ren, and W. Lou, "Achieving secure, scalable, and fine-grained data access control in cloud computing, " in Proc. IEEE INFOCOM, 2010, pp. 534-542.
14. G. Wang, Q. Liu, J. Wu, and M. Guo, "Hierarchical attribute-based encryption and scalable user revocation for sharing data in cloud servers, " Computers Security, vol. 30, no. 5, pp. 320-331, 2011.
15. S. Yu, C. Wang, K. Ren, and W. Lou, "Attribute based data sharing with attribute revocation, " in Proc. 5th ACM Symp. Inform., Comput. Commun. Security, 2010, pp. 261-270.
16. Z. Yan, Ed., Trust Modeling and Management in Digital Environments: from Social Concept to System Development. Hershey, PA, USA: IGI Global, 2010.
17. Z. Yan, "A comprehensive trust model for component software, " Proc. 4th Int. Workshop Security, Privacy Trust Pervasive Ubiquitous Comput., 2008, pp. 1-6.
18. G. Wang, Q. Liu, and J. Wu, "Hierarchical attribute-based encryption for fine-grained access control in cloud storage services, " in Proc. 17th ACM Conf. Comput. Commun. Security, 2010, pp. 735-737.
19. M. Zhou, Y. Mu, W. Susilo, and J. Yan, "Piracy-preserved access control for cloud computing, " in Proc. IEEE TrustCom11, 2011, pp. 83-90.
20. G. Ateniese, K. Fu, M. Green, and S. Hohenberger, "Improved proxy re-encryption schemes with applications to secure distributed storage, " in Proc. 12th Annu. Netw. Distrib. Syst. Security Symp., 2005, pp. 29-43.
21. Z. Yan, M. Wang, V. Niemi, and R. Kantola, "Secure pervasive social networking based on multi-dimensional trust levels, " in Proc. IEEE Conf. Commun. Netw. Security, 2013, pp. 100-108.
22. Z. Wan, J. Liu, and R. H. Deng, "HASBE: A hierarchical attributebased solution for flexible and scalable access control in cloud computing, " IEEE Trans. Inf. Forensics Security, vol. 7, no. 2, pp. 743-754, Apr. 2012.
23. Z. Yan, Y. Chen, and Y. Shen, "A practical reputation system for pervasive social chatting, " Comput. Syst. Sciences, vol. 79, no. 5, pp. 556-572, 2013.
24. Z. Yan, Trust Management in Mobile Environments-Usable and Autonomic Models. Hershey, PA, USA: IGI Global, 2013.
25. G. Ateniese, K. Fu, M. Green, and S. Hohenberger, "Improved proxy re-encryption schemes with applications to secure distributed storage, " in Proc. 12th Annu. Netw. Distrib. Syst. Security Symp., 2005, pp. 29-43.
26. G. Ateniese, K. Fu, M. Green, and S. Hohenberger, "Improved proxy re-encryption schemes with applications to secure distributed storage, " ACM Trans. Inf. Syst. Security, vol. 9, no. 1, pp. 1-30, Feb. 2006.
27. Pairing-Based Cryptography (PBC) library [Online]. Available: http://crypto. stanford. edu/pbc/, 2014.
28. Y. Tang, P. P. C. Lee, J. C. S. Lui, and R. Perlman, "Secure overlay cloud storage with access control and assured deletion, " IEEE Trans. Dependable Secure Comput., vol. 9, no. 6, pp. 903-916, Nov. / Dec. 2012.
29. Z. Yan, X. Li, and R. Kantola, "Personal data access based on trust assessment in mobile social networking, " in Proc. IEEE 13th Int. Conf. Trust, Security Privacy Comput. Commun., 2014, pp. 989-994.
30. Z. Yan, X. Li, and R. Kantola, "Controlling Cloud Data Access Based on Reputation, " Mobile Netw. Appl., Springer, 2015, Doi: 10. 1007/s11036-015-0591-6.
31. L. Zhou, V. Varadharajan, and M. Hitchens, "Achieving secure role-based access control on encrypted data in cloud storage, " IEEE Trans. Inf. Forensics Security, vol. 8, no. 12, pp. 1947-1960, Dec. 2013.
32. W. Wang, J. Han, M. Song, and X. Wang, "The design of a trust and role based access control model in cloud computing, " in Proc. 6th Int. Conf. Pervasive Comput. Appl., 2011, pp. 300-334.
33. T. Zhu, W. Liu, and J. Song, "An efficient role based access control system for cloud computing, " in Proc. IEEE 11th Int. Conf. Comput. Inf. Technol., 2011, pp. 97-102.
34. S. Yang, P. Lai, and J. Lin, "Design role-based multi-tenancy access control scheme for cloud services, " in Proc. Int. Symp. Biometrics Security Technol., 2013, pp. 273-279.
35. A. Barsoum and A. Hasan, "Enabling dynamic data and indirect mutual trust for cloud computing storage systems, " IEEE Trans. Parallel Distrib. Syst., vol. 24, no. 12, pp. 2375-2385, Dec. 2013.
36. G. Lin, D. Wang, Y. Bie, and M. Lei, "MTBAC: A mutual trust based access control model in cloud computing, " China Commun., vol. 11, no. 4, pp. 154-162, 2014.
37. K. Yang, X. Jia, K. Ren, B. Zhang, and R. Xie, "DAC-MACS: Effective data access control for multiauthority cloud storage systems, " IEEE Trans. Inf. Forensics Security, vol. 8, no. 11, pp. 1790-1801, Nov. 2013.
38. C. Ardagna, M. Conti, M. Leone, and J. Stefa, "An anonymous end-to-end communication protocol for mobile cloud environments, " IEEE Trans. Services Comput., vol. 7, no. 3, pp. 373-386, Jul.-Sep. 2014.
39. M. Ambrosin, M. Conti, and T. Dargahi, "On the feasibility of attribute-based encryption on smartphone devices, " in Proc. Workshop IoT Challenges Mobile Ind. Syst., 2015, pp. 49-54.