ABR: A new efficient attribute based revocation on access control system
Résumé
Nowadays Cloud computing services are becoming
a necessity due to the huge evolution of internet technology and
the need of outsourcing data into external servers. However, data
externalization introduces several issues. Access control is one of
the most challenging issues, it must ensure data confidentiality
through enforced and flexible access policies. Revocation is one of
the important tasks of access control process, generally, it consists
on banishing some roles from users on the system. Ciphertext-
policy attribute-based encryption is a promising cryptographic
method. It provides fine-grained access which makes it very useful
in case of group-sharing applications. However, the challenge of
this method is the revocation. Through few past years, there
have been many proposed revocation solutions on ABE, but
these solutions still lack of efficiency. In this paper, we propose
an access control mechanism with an immediate and efficient
attributes or users revocation. Our solution uses CP-ABE for
a flexible and fine grained access while it provides collusion
resistance, supports scalability and does not require neither re-
keying mechanisms nor keys redistribution.