Communication Dans Un Congrès Année : 2017

Immediate Attribute Revocation in Decentralized Attribute-Based Encryption Access Control

Résumé

Access control is one of the most challenging issues in Cloud environment, it must ensure data confidentiality through enforced and flexible access policies. The revocation is an important task of the access control process, generally it consists on banishing some roles from the users. Attribute-based encryption is a promising cryptographic method which provides the fine-grained access, which makes it very useful in case of group sharing applications. This solution has initially been developed on a central authority model. Later, it has been extended to a multi-authority model which is more convenient and more reliable. However, the revocation problem is still the major challenge of this approach. There have been few proposed revocation solutions for the Multi-authority scheme and these solutions suffer from the lack of efficiency. In this paper, we propose an access control mechanism on a multi-authority architecture with an immediate and efficient attributes' or users' revocation. The proposed scheme uses decentralized CP-ABE to provide flexible and fine-grained access. Our solution provides collusion resistance, prevents security degradations, supports scalability and does not require keys' redistribution.

Fichier non déposé

Dates et versions

hal-01727789 , version 1 (09-03-2018)

Identifiants

Citer

Youcef Imine, Ahmed Lounis, Abdelmadjid Bouabdallah. Immediate Attribute Revocation in Decentralized Attribute-Based Encryption Access Control. 16th IEEE International Conference On Trust, Security And Privacy In Computing And Communications (TrustCom 2017), Aug 2017, Sydney, Australia. pp.33-40, ⟨10.1109/Trustcom/BigDataSE/ICESS.2017.217⟩. ⟨hal-01727789⟩
150 Consultations
0 Téléchargements

Altmetric

Partager

  • More