A Practical Attribute-Based Document Collection Hierarchical Encryption Scheme in Cloud Computing

Ciphertext-policy attribute-based encryption can provide fine-grained access control and secure data sharing to the data users in cloud computing. However, the encryption/decryption efficiency of existing schemes can be further improved when encrypting a large document collection. In this paper, we...

Full description

Bibliographic Details
Main Authors: Junsong Fu, Na Wang
Format: Article
Language:English
Published: IEEE 2019-01-01
Series:IEEE Access
Subjects:
Online Access:https://ieeexplore.ieee.org/document/8667830/
_version_ 1819179306655416320
author Junsong Fu
Na Wang
author_facet Junsong Fu
Na Wang
author_sort Junsong Fu
collection DOAJ
description Ciphertext-policy attribute-based encryption can provide fine-grained access control and secure data sharing to the data users in cloud computing. However, the encryption/decryption efficiency of existing schemes can be further improved when encrypting a large document collection. In this paper, we propose a practical Ciphertext-Policy Attribute-Based Hierarchical document collection Encryption scheme named CP-ABHE. By practical, we mean that CP-ABHE is more efficient in both computation and storage space without sacrificing data security. In CP-ABHE, we first construct a set of integrated access trees based on the documents' attribute sets. We employ the greedy strategy to build the trees incrementally and grow the trees dynamically by combining the small ones. Then, all the documents on an integrated access tree are encrypted together. Different to existing schemes, the leaves in different access trees with the same attribute share the same secret number, which is employed to encrypt the documents. This greatly improves the performance of CP-ABHE. The security of our scheme is theoretically proved based on the decisional bilinear Diffie-Hellman assumption. The simulation results illustrate that CP-ABHE performs very well in terms of security, efficiency, and the storage size of the ciphertext.
first_indexed 2024-12-22T21:56:21Z
format Article
id doaj.art-a1c03260fbcd47c5aca12be87a42f13b
institution Directory Open Access Journal
issn 2169-3536
language English
last_indexed 2024-12-22T21:56:21Z
publishDate 2019-01-01
publisher IEEE
record_format Article
series IEEE Access
spelling doaj.art-a1c03260fbcd47c5aca12be87a42f13b2022-12-21T18:11:15ZengIEEEIEEE Access2169-35362019-01-017362183623210.1109/ACCESS.2019.29053468667830A Practical Attribute-Based Document Collection Hierarchical Encryption Scheme in Cloud ComputingJunsong Fu0Na Wang1https://orcid.org/0000-0002-8687-8820School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, ChinaSchool of Computer Science, Beijing University of Posts and Telecommunications, Beijing, ChinaCiphertext-policy attribute-based encryption can provide fine-grained access control and secure data sharing to the data users in cloud computing. However, the encryption/decryption efficiency of existing schemes can be further improved when encrypting a large document collection. In this paper, we propose a practical Ciphertext-Policy Attribute-Based Hierarchical document collection Encryption scheme named CP-ABHE. By practical, we mean that CP-ABHE is more efficient in both computation and storage space without sacrificing data security. In CP-ABHE, we first construct a set of integrated access trees based on the documents' attribute sets. We employ the greedy strategy to build the trees incrementally and grow the trees dynamically by combining the small ones. Then, all the documents on an integrated access tree are encrypted together. Different to existing schemes, the leaves in different access trees with the same attribute share the same secret number, which is employed to encrypt the documents. This greatly improves the performance of CP-ABHE. The security of our scheme is theoretically proved based on the decisional bilinear Diffie-Hellman assumption. The simulation results illustrate that CP-ABHE performs very well in terms of security, efficiency, and the storage size of the ciphertext.https://ieeexplore.ieee.org/document/8667830/Cloud computingattribute-based document collection encryptionencryption/decryption efficiencyinformation security
spellingShingle Junsong Fu
Na Wang
A Practical Attribute-Based Document Collection Hierarchical Encryption Scheme in Cloud Computing
IEEE Access
Cloud computing
attribute-based document collection encryption
encryption/decryption efficiency
information security
title A Practical Attribute-Based Document Collection Hierarchical Encryption Scheme in Cloud Computing
title_full A Practical Attribute-Based Document Collection Hierarchical Encryption Scheme in Cloud Computing
title_fullStr A Practical Attribute-Based Document Collection Hierarchical Encryption Scheme in Cloud Computing
title_full_unstemmed A Practical Attribute-Based Document Collection Hierarchical Encryption Scheme in Cloud Computing
title_short A Practical Attribute-Based Document Collection Hierarchical Encryption Scheme in Cloud Computing
title_sort practical attribute based document collection hierarchical encryption scheme in cloud computing
topic Cloud computing
attribute-based document collection encryption
encryption/decryption efficiency
information security
url https://ieeexplore.ieee.org/document/8667830/
work_keys_str_mv AT junsongfu apracticalattributebaseddocumentcollectionhierarchicalencryptionschemeincloudcomputing
AT nawang apracticalattributebaseddocumentcollectionhierarchicalencryptionschemeincloudcomputing
AT junsongfu practicalattributebaseddocumentcollectionhierarchicalencryptionschemeincloudcomputing
AT nawang practicalattributebaseddocumentcollectionhierarchicalencryptionschemeincloudcomputing