A Survey on Hierarchical Attribute Set Based Encryption (HASBE) Access Control Model for Cloud Computing

Abstract

Cloud computing refers to the application and service that run on a distributed system using virtualized resources and access by common internet protocol and networking standard. Cloud computing virtualizes system by pooling and sharing resources. System and resources can be monitored from central infrastructure as needed. It requires high security because of now a days companies going to put more essential and huge amount of data on cloud. That's why the reason traditional access control is not enough For the High security .so that the attribute-based encryption (ABE) have been proposed for access control of outsourced data in cloud computing with the complex access control policy.in this paper, we have proposed hierarchical attribute-set-based encryption (HASBE) access control by extending cipher-text policy and attribute-set-based encryption (ASBE) with a hierarchical structure of users. HASBE provides Flexibility, scalability and fine-grained access control with efficient user revocation but the hierarchical structure of the domain hierarchy is to complex and there is no sub-domain level user hierarchy which increases system response time and decreases the system performance. So we are proposing HASBE scheme by creating a sub domain in to the user level Hierarchy that reduce the complexity of the hierarchy and also improve the system performance.

HASBE access control model with Secure Key Distribution and Efficient Domain Hierarchy for cloud computing

“…HASBE structure contains a root master at the top, followed by multiple domain masters. Each domain master will have set of users and each user contains set of attributes [7]. To protect sensitive data from rivalaries, the data is stroed in encrypted form on servers, while the decryption keys are disclosed to authorized users only.…”

“…Trusted Authority Figure 1. User level hierarchy of HASBE [7] Domain Authority Major roles in existing system are "Data Owner", Data Consumer", "Domain Authority" and "Trusted Authority". As discussed earlier user stores encrypted data on cloud, which can be regained by decrypting the same using private key provided.…”

“…Figure 2. Domain Hierarchy [7] As shown in Figure 2 user has to register by providing attribute values. Once user registeration is done, C1 ("president") approves all the information of user and C1 provides userid and password to the user.…”

“…When C2 ("vice president") wants to access employee's attribute then MK ("Master key") is used, which is produced by picking the attributes from the available set. If any lower level authority is offline or not responding then higher level authority will respond to all the requests of lower authorities [7]. The C2 (vice-president) will allocate access rights and direct the employees under him.…”

“…The C2 (vice-president) will allocate access rights and direct the employees under him. Hence the administration of assignment of tasks to employees should be done in a method that is known to himself by immediate domain authority with the approval of "president" in root domain [7].…”