vFAC: Fine-Grained Access Control with Versatility for Cloud Storage
This work addresses data security and privacy concerns for users and organizations relying on cloud storage, but it appears incremental as it builds on existing multi-authority CP-ABE methods.
The paper tackled the problem of fine-grained access control in cloud storage by proposing vFAC, a multi-authority CP-ABE scheme that addresses issues like key escrow and policy hiding, and demonstrated it is statically secure with comprehensive features and scalability compared to existing schemes.
In recent years, cloud storage technology has been widely used in many fields such as education, business, medical and more because of its convenience and low cost. With the widespread applications of cloud storage technology, data access control methods become more and more important in cloud-based network. The ciphertext policy attribute-based encryption (CP-ABE) scheme is very suitable for access control of data in cloud storage. However, in many practical scenarios, all attributes of a user cannot be managed by one authority, so many multi-authority CP-ABE schemes have emerged. Moreover, cloud servers are usually semi-trusted, which may leak user information. Aiming at the above problems, we propose a fine-grained access control scheme with versatility for cloud storage based on multi-authority CP-ABE, named vFAC. The proposed vFAC has the features of large universe, no key escrow problem, online/offline mechanism, hidden policy, verifiability and user revocation. Finally, we demonstrate vFAC is static security under the random oracle model. Through the comparison of several existing schemes in terms of features, computational overhead and storage cost, we can draw a conclusion that vFAC is more comprehensive and scalable.