Abstract
The foremost security concerns for big data in the cloud are privacy and access control. Ciphertext-policy attribute based encryption (CP-ABE) is an effective cryptographic solution for above concerns, but the existing CP-ABE schemes are not suitable for big data in the cloud as they require huge computation time for encryption and decryption process. In this paper, we propose a new verifiable outsourced CP-ABE for big data privacy and access control in the cloud. Our scheme reduces the computational overhead of encryption and decryption by outsourcing the heavy computations to the proxy server. Our scheme also verifies the correctness of the data along with the outsourcing computations. Further, our scheme limits the data access for a set of users instead of providing an infinite number of times data access, which is essentially required for commercial applications. In security analysis, we prove that our scheme is secure against chosen plain-text attack, collusion and proxy attacks. Performance analysis proves that our scheme is efficient.
This is a preview of subscription content, log in via an institution to check access.
Similar content being viewed by others
References
Akinyele JA, Garman C, Miers I, Pagano MW, Rushanan M, Green M (2013) Charm: a framework for rapidly prototyping cryptosystems. J Cryptogr Eng 3(2):111–128. https://doi.org/10.1007/s13389-013-0057-3
Bethencourt J, Sahai A, Waters B (2007) Ciphertext-policy attribute-based encryption. In: Security and privacy, 2007. SP’07. IEEE symposium, IEEE, pp 321–334. https://doi.org/10.1109/SP.2007.11
Cheung L, Newport C (2007) Provably secure ciphertext policy ABE. In: Proceedings of the 14th ACM conference on computer and communications security. ACM, Alexandria, Virginia, pp 456–465. https://doi.org/10.1145/1315245.1315302
De SJ, Ruj S (2015) Decentralized access control on data in the cloud with fast encryption and outsourced decryption. In: 2015 IEEE global communications conference (GLOBECOM). IEEE, San Diego, CA, pp 1–6. https://doi.org/10.1109/GLOCOM.2015.7417639
Deng H, Wu Q, Qin B, Domingo-Ferrer J, Zhang L, Liu J (2014) Ciphertext-policy hierarchical attribute-based encryption with short ciphertexts. Inf Sci 275:370–384. https://doi.org/10.1016/j.ins.2014.01.035
Goyal V, Pandey O, Sahai A, Waters B (2006) Attribute-based encryption for fine-grained access control of encrypted data. In: Proceedings of the 13th ACM conference on computer and communications security. ACM, Alexandria, Virginia, pp 89–98. https://doi.org/10.1145/1180405.1180418
Green M, Hohenberger S, Waters B (2011) Outsourcing the decryption of ABE ciphertexts. In: Proceedings of the 20th USENIX conference on security. USENIX Association, San Francisco, CA, p 34
Gupta B, Agrawal DP, Yamaguchi S (2016) Handbook of research on modern cryptographic solutions for computer and cyber security. IGI Global, Hershey, PA, pp 1–589. https://doi.org/10.4018/978-1-5225-0105-3
Jiang Y, Susilo W, Mu Y, Guo F (2017) Flexible ciphertext-policy attribute-based encryption supporting AND-gate and threshold with short ciphertexts. Int J Inf Secur. https://doi.org/10.1007/s10207-017-0376-y
Khan N, Yaqoob I, Hashem IAT, Inayat Z, Ali M, Kamaleldin W et al (2014) Big data: survey, technologies, opportunities, and challenges. Sci World J. https://doi.org/10.1155/2014/712826
Kumar PP, Kumar PS, Alphonse PJA (2018) Attribute based encryption in cloud computing: a survey, gap analysis, and future directions. J Netw Comput Appl 108:37–52. https://doi.org/10.1016/j.jnca.2018.02.009
Li J, Wang Y, Zhang Y, Han J (2017) Full verifiability for outsourced decryption in attribute based encryption. IEEE Trans Serv Comput. https://doi.org/10.1109/TSC.2017.2710190
Li L, Gu T, Chang L, Xu Z, Liu Y, Qian J (2017) A ciphertext-policy attribute-based encryption based on an ordered binary decision diagram. IEEE Access 5:1137–1145. https://doi.org/10.1109/ACCESS.2017.2651904
Li J, Chen X, Chow SS, Huang Q, Wong DS, Liu Z (2018) Multi-authority fine-grained access control with accountability and its application in cloud. J Netw Comput Appl 112:89–96. https://doi.org/10.1016/j.jnca.2018.03.006
Li J, Zhang Y, Chen X, Xiang Y (2018) Secure attribute-based data sharing for resource-limited users in cloud computing. Comput Secur 72:1–12. https://doi.org/10.1016/j.cose.2017.08.007
Li J, Li X, Wang L, He D, Ahmad H, Niu X (2018) Fuzzy encryption in cloud computation: efficient verifiable outsourced attribute-based encryption. Soft Comput 22(3):707–714. https://doi.org/10.1007/s00500-017-2482-1
Lin S, Zhang R, Ma H, Wang M (2015) Revisiting attribute-based encryption with verifiable outsourced decryption. IEEE Trans Inf Forensics Secur 10(10):2119–2130. https://doi.org/10.1109/TIFS.2015.2449264
Ma H, Zhang R, Wan Z, Lu Y, Lin S (2015) Verifiable and exculpable outsourced attribute-based encryption for access control in cloud computing. IEEE Trans Dependable Secure Comput. https://doi.org/10.1109/TDSC.2015.2499755
Ma X, Li J, Zhang F (2013) Outsourcing computation of modular exponentiations in cloud computing. Clust Comput 16(4):787–796. https://doi.org/10.1007/s10586-013-0252-0
Mao X, Lai J, Mei Q, Chen K, Weng J (2016) Generic and efficient constructions of attribute-based encryption with verifiable outsourced decryption. IEEE Trans Dependable Secure Comput 13(5):533–546. https://doi.org/10.1109/TDSC.2015.2423669
Ning J, Cao Z, Dong X, Liang K, Ma H, Wei L (2018) Auditable sigma-time outsourced attribute-based encryption for access control in cloud computing. IEEE Trans Inf Forensics Secur 13(1):94–105. https://doi.org/10.1109/TIFS.2017.2738601
Qin B, Deng RH, Liu S, Ma S (2015) Attribute-based encryption with efficient verifiable outsourced decryption. IEEE Trans Inf Forensics Secur 10(7):1384–1393. https://doi.org/10.1109/TIFS.2015.2410137
Sahai A, Waters B (2005) Fuzzy identity-based encryption. In: Annual international conference on the theory and applications of cryptographic techniques. Springer, Berlin, pp 457–473. https://doi.org/10.1007/11426639_27
Shamir A (1979) How to share a secret. Commun ACM 22(11):612–613. https://doi.org/10.1145/359168.359176
Takabi H, Joshi JB, Ahn GJ (2010) Security and privacy challenges in cloud computing environments. IEEE Secur Priv 8(6):24–31. https://doi.org/10.1109/MSP.2010.186
Voorsluys W, Broberg J, Buyya R (2011) Introduction to cloud computing. Cloud Comput Princ Paradig. https://doi.org/10.1002/9780470940105.ch1
Wang H, He D, Shen J, Zheng Z, Zhao C, Zhao M (2017) Verifiable outsourced ciphertext-policy attribute-based encryption in cloud computing. Soft Comput 21(24):7325–7335. https://doi.org/10.1007/s00500-016-2271-2
Wang H, He D, Han J (2017) VOD-ADAC: anonymous distributed fine-grained access control protocol with verifiable outsourced decryption in public cloud. IEEE Trans Serv Comput. https://doi.org/10.1109/TSC.2017.2687459
Waters B (2011) Ciphertext-policy attribute-based encryption: an expressive, efficient, and provably secure realization. In: International workshop on public key cryptography, Springer, Berlin, pp 53–70. https://doi.org/10.1007/978-3-642-19379-8_4
Xiang C, Tang C (2015) Efficient outsourcing schemes of modular exponentiations with checkability for untrusted cloud server. J Ambient Intell Hum Comput 6(1):131–139. https://doi.org/10.1007/s12652-014-0254-7
Xiong H, Sun J (2017) Comments on verifiable and exculpable outsourced attribute-based encryption for access control in cloud computing. IEEE Trans Dependable Secure Comput 14(4):461–462. https://doi.org/10.1109/TDSC.2017.2710119
Ye H, Liu J, Wang W, Li P, Li T, Li J (2018) Secure and efficient outsourcing differential privacy data release scheme in cyber-physical system. Future Gener Comput Syst. https://doi.org/10.1016/j.future.2018.03.034
Zhang Y, Zheng D, Li Q, Li J, Li H (2016) Online/offline unbounded multi-authority attribute-based encryption for data sharing in mobile cloud computing. Secur Commun Netw 9(16):3688–3702. https://doi.org/10.1002/sec.1574
Zhang R, Ma H, Lu Y (2017) Fine-grained access control system based on fully outsourced attribute-based encryption. J Syst Softw 125:344–353. https://doi.org/10.1016/j.jss.2016.12.018
Zhang Y, Chen X, Li J, Wong DS, Li H, You I (2017) Ensuring attribute privacy protection and fast decryption for outsourced data security in mobile cloud computing. Inf Sci 379:42–61. https://doi.org/10.1016/j.ins.2016.04.015
Author information
Authors and Affiliations
Corresponding author
Additional information
Publisher's note
Springer Nature remains neutral with regard to jurisdictional claims in published maps and institutional affiliations.
Rights and permissions
About this article
Cite this article
Premkamal, P.K., Pasupuleti, S.K. & Alphonse, P.J.A. A new verifiable outsourced ciphertext-policy attribute based encryption for big data privacy and access control in cloud. J Ambient Intell Human Comput 10, 2693–2707 (2019). https://doi.org/10.1007/s12652-018-0967-0
Received:
Accepted:
Published:
Issue Date:
DOI: https://doi.org/10.1007/s12652-018-0967-0