CP-ABE Access Control Scheme for Sensitive Data Set Constraint with Hidden Access Policy and Constraint Policy

Abstract

CP-ABE (Ciphertext-Policy Attribute-Based Encryption) with hidden access control policy enables data owners to share their encrypted data using cloud storage with authorized users while keeping the access control policies blinded. However, a mechanism to prevent users from achieving successive access to a data owner’s certain number of data objects, which present a conflict of interest or whose combination thereof is sensitive, has yet to be studied. In this paper, we analyze the underlying relations among these particular data objects, introduce the concept of the sensitive data set constraint, and propose a CP-ABE access control scheme with hidden attributes for the sensitive data set constraint. This scheme incorporates extensible, partially hidden constraint policy. In our scheme, due to the separation of duty principle, the duties of enforcing the access control policy and the constraint policy are divided into two independent entities to enhance security. The hidden constraint policy provides flexibility in that the data owner can partially change the sensitive data set constraint structure after the system has been set up.

Fine-Grained Task Access Control System for Mobile Crowdsensing

“…To handle the problems above, ABE technology, which was firstly proposed by Sahai and Water [25], is a promising tool. As a well-known data-sharing tool, many ABE schemes aiming at settling the challenges of confidentiality and flexibility in data access control have been proposed [26][27][28][29][30]. To enable the users to search on the encrypted files, Sun et al [26] proposed a fine-grained keyword search scheme.…”

“…To achieve lightweight computation, predecryption is provided in Ref. [30] and our system. As a result, task performers in both of the two systems can decrypt the ciphertext with their mobile devices efficiently.…”

“…e performance evaluation is performed among Ref. [26,28,[30][31][32] and our system. We mainly consider the following features in Table 2: hidden access policy, ciphertext search, predecryption, and access structure.…”

“…Although ABE technology, which provides fine-grained access control, is employed in all the aforementioned schemes, only Ref. [28,30,32] and our system support hiding the access policy. Malicious users in Ref.…”

A Source Hiding Identity-Based Proxy Reencryption Scheme for Wireless Sensor Network

“…Luo, Hu, and Chen [15] revealed another scheme to provide "AND" gates on both positive and negative attributes. Later on, a ciphertext-policy attribute-based proxy reencryption (CPAB-PRE) [16,17] was presented to support a monotonic access formula in the selective model. Further, they enhanced its security in the adaptive model [18].…”