Integration of Hierarchical Access Control and Keyword Search Encryption in Cloud Computing Environment

Abstract

Abstract-An increasing number of applications have been proposed and discussed on the cloud computing environment because it can bring many benefits like reducing the cost of maintaining data centers in an enterprise, low data management cost and retrieval of data whenever you want, etc. As more and more sensitive information and personal data are centralized into the cloud servers, how to protect data privacy and combat the unauthorized accesses is an important issue in the cloud computing environment since the outsourcing-service server may not be fully trusted. One method to alleviate the security worries is storing data in the encrypted form. The drawback of the encrypted data is the limitation of usability. The keyword search encryption technique has been proposed to solve the query limitation for the encrypted data; however, most of the researches focus on processing an individual user request. The proposed approach combines the fine-grained access control and keyword search encryption to provide multiple users' access controls in the cloud environment with encrypted data protection. The user in this situation can retrieve the data file from the cloud database only if she/he gives appropriate keywords and presents the identity or position that satisfies the rules of the access rights.Index Terms-Cloud computing, keyword search encryption, hidden vector encryption, fine-grained access control.

Fine-Grained Access Control Aware Multi-User Data Sharing with Secure Keyword Search

“…So, the trapdoor distribution is obviously a cumbersome task. C. Wang et al [21] gave a keyword search encryption and some properties of their scheme appear similar to ours. They integrate the symmetric key predicate encryption into KP-ABE, which provides the keyword search with the property of fine-grained access control.…”

“…If the owner wants to add/remove an index, the only way is to reconstruct the whole ciphertext data. Consequently, works of keyword search schemes [4], [6], [13], [20], [21] do not support the (multi-user) update of indexes. Table 1 gives a comparison between these existing schemes and our scheme.…”

“…The owner generates a signature with a specific valid period, and then encrypts the timelimited signature and the time information by a public-key encryption algorithm (Details of signature and public-key encryption algorithms are not specified, and we use C sign and C enc to denote their computation cost for a comparison in Table 3). Their update access control frequently requires [20] no no no no no -no C. Wang et al [21] yes no no yes yes -no Our Scheme yes yes yes yes yes yes yes the owner's help. Moreover, different from our scheme, [12] discussed a different revocation, attribute revocation, which revokes the read access privilege.…”

“…Works of [9], [12], [22] are related to the access control of cryptographic cloud storage, and [2], [4], [6], [13], [20], [21], [23] are related to the multi-user encrypted keyword search schemes.…”

“…Consequently, neither of these schemes achieves the OI-MWMR for multi-user cryptographic cloud storage. Works of [2], [4], [6], [13], [20], [21], [23] considered the multi-user encrypted keyword search scenario. Bao et al [2], [23] is one of the design bases of our scheme.…”