Privacy-preserved access control for cloud computing

Miao Zhou; Yi Mu; Willy Susilo; Man Ho Allen Au; Jun Yan

doi:10.1109/TrustCom.2011.14

Privacy-preserved access control for cloud computing

Miao Zhou, Yi Mu, Willy Susilo, Man Ho Allen Au, Jun Yan

Research output: Chapter in book / Conference proceeding › Conference article published in proceeding or book › Academic research › peer-review

37 Citations (Scopus)

Abstract

The problem of access control on outsourced data to "honest but curious" cloud servers has received considerable attention, especially in scenarios involving potentially huge sets of data files, where re-encryption and re-transmission by the data owner may not be acceptable. Considering the user privacy and data security in cloud environment, in this paper, we propose a solution to achieve flexible and fine-grained access control on outsourced data files. In particular, we look at the problem of defining and assigning keys to users based on different attribute sets, and hiding access policies as well as users information to the third-party cloud servers. Our proposed scheme is partially based on our observation that, in practical application scenarios each user can be associated with a set of attributes which are meaningful in the access policy and data file context. The access policy can thus be defined as a logical expression formula over different attribute sets to reflect the scope of data file that the kind of users is allowed to access. As any access policy can be represented as such a logical expression formula, fine-grained access control can be accomplished.

Original language	English
Title of host publication	Proc. 10th IEEE Int. Conf. on Trust, Security and Privacy in Computing and Communications, TrustCom 2011, 8th IEEE Int. Conf. on Embedded Software and Systems, ICESS 2011, 6th Int. Conf. FCST 2011
Pages	83-90
Number of pages	8
DOIs	https://doi.org/10.1109/TrustCom.2011.14
Publication status	Published - 1 Dec 2011
Externally published	Yes
Event	10th IEEE Int. Conf. on Trust, Security and Privacy in Computing and Communications, TrustCom 2011, 8th IEEE Int. Conf. on Embedded Software and Systems, ICESS 2011, 6th Int. Conf. on Frontier of Computer Science and Technology, FCST 2011 - Changsha, China Duration: 16 Nov 2011 → 18 Nov 2011

Conference

Conference	10th IEEE Int. Conf. on Trust, Security and Privacy in Computing and Communications, TrustCom 2011, 8th IEEE Int. Conf. on Embedded Software and Systems, ICESS 2011, 6th Int. Conf. on Frontier of Computer Science and Technology, FCST 2011
Country/Territory	China
City	Changsha
Period	16/11/11 → 18/11/11

Keywords

Access Control
Cloud Computing
Encryption

ASJC Scopus subject areas

Hardware and Architecture
Software

More information

10.1109/TrustCom.2011.14

Cite this

Zhou, M., Mu, Y., Susilo, W., Au, M. H. A., & Yan, J. (2011). Privacy-preserved access control for cloud computing. In Proc. 10th IEEE Int. Conf. on Trust, Security and Privacy in Computing and Communications, TrustCom 2011, 8th IEEE Int. Conf. on Embedded Software and Systems, ICESS 2011, 6th Int. Conf. FCST 2011 (pp. 83-90). Article 6120806 https://doi.org/10.1109/TrustCom.2011.14

@inproceedings{a0dd105c1d914a8981b45e8a2188e7f4,

title = "Privacy-preserved access control for cloud computing",

abstract = "The problem of access control on outsourced data to {"}honest but curious{"} cloud servers has received considerable attention, especially in scenarios involving potentially huge sets of data files, where re-encryption and re-transmission by the data owner may not be acceptable. Considering the user privacy and data security in cloud environment, in this paper, we propose a solution to achieve flexible and fine-grained access control on outsourced data files. In particular, we look at the problem of defining and assigning keys to users based on different attribute sets, and hiding access policies as well as users information to the third-party cloud servers. Our proposed scheme is partially based on our observation that, in practical application scenarios each user can be associated with a set of attributes which are meaningful in the access policy and data file context. The access policy can thus be defined as a logical expression formula over different attribute sets to reflect the scope of data file that the kind of users is allowed to access. As any access policy can be represented as such a logical expression formula, fine-grained access control can be accomplished.",

keywords = "Access Control, Cloud Computing, Encryption",

author = "Miao Zhou and Yi Mu and Willy Susilo and Au, {Man Ho Allen} and Jun Yan",

year = "2011",

month = dec,

day = "1",

doi = "10.1109/TrustCom.2011.14",

language = "English",

isbn = "9780769546001",

pages = "83--90",

booktitle = "Proc. 10th IEEE Int. Conf. on Trust, Security and Privacy in Computing and Communications, TrustCom 2011, 8th IEEE Int. Conf. on Embedded Software and Systems, ICESS 2011, 6th Int. Conf. FCST 2011",

note = "10th IEEE Int. Conf. on Trust, Security and Privacy in Computing and Communications, TrustCom 2011, 8th IEEE Int. Conf. on Embedded Software and Systems, ICESS 2011, 6th Int. Conf. on Frontier of Computer Science and Technology, FCST 2011 ; Conference date: 16-11-2011 Through 18-11-2011",

}

Zhou, M, Mu, Y, Susilo, W, Au, MHA & Yan, J 2011, Privacy-preserved access control for cloud computing. in Proc. 10th IEEE Int. Conf. on Trust, Security and Privacy in Computing and Communications, TrustCom 2011, 8th IEEE Int. Conf. on Embedded Software and Systems, ICESS 2011, 6th Int. Conf. FCST 2011., 6120806, pp. 83-90, 10th IEEE Int. Conf. on Trust, Security and Privacy in Computing and Communications, TrustCom 2011, 8th IEEE Int. Conf. on Embedded Software and Systems, ICESS 2011, 6th Int. Conf. on Frontier of Computer Science and Technology, FCST 2011, Changsha, China, 16/11/11. https://doi.org/10.1109/TrustCom.2011.14

Privacy-preserved access control for cloud computing. / Zhou, Miao; Mu, Yi; Susilo, Willy et al.
Proc. 10th IEEE Int. Conf. on Trust, Security and Privacy in Computing and Communications, TrustCom 2011, 8th IEEE Int. Conf. on Embedded Software and Systems, ICESS 2011, 6th Int. Conf. FCST 2011. 2011. p. 83-90 6120806.

Research output: Chapter in book / Conference proceeding › Conference article published in proceeding or book › Academic research › peer-review

TY - GEN

T1 - Privacy-preserved access control for cloud computing

AU - Zhou, Miao

AU - Mu, Yi

AU - Susilo, Willy

AU - Au, Man Ho Allen

AU - Yan, Jun

PY - 2011/12/1

Y1 - 2011/12/1

N2 - The problem of access control on outsourced data to "honest but curious" cloud servers has received considerable attention, especially in scenarios involving potentially huge sets of data files, where re-encryption and re-transmission by the data owner may not be acceptable. Considering the user privacy and data security in cloud environment, in this paper, we propose a solution to achieve flexible and fine-grained access control on outsourced data files. In particular, we look at the problem of defining and assigning keys to users based on different attribute sets, and hiding access policies as well as users information to the third-party cloud servers. Our proposed scheme is partially based on our observation that, in practical application scenarios each user can be associated with a set of attributes which are meaningful in the access policy and data file context. The access policy can thus be defined as a logical expression formula over different attribute sets to reflect the scope of data file that the kind of users is allowed to access. As any access policy can be represented as such a logical expression formula, fine-grained access control can be accomplished.

AB - The problem of access control on outsourced data to "honest but curious" cloud servers has received considerable attention, especially in scenarios involving potentially huge sets of data files, where re-encryption and re-transmission by the data owner may not be acceptable. Considering the user privacy and data security in cloud environment, in this paper, we propose a solution to achieve flexible and fine-grained access control on outsourced data files. In particular, we look at the problem of defining and assigning keys to users based on different attribute sets, and hiding access policies as well as users information to the third-party cloud servers. Our proposed scheme is partially based on our observation that, in practical application scenarios each user can be associated with a set of attributes which are meaningful in the access policy and data file context. The access policy can thus be defined as a logical expression formula over different attribute sets to reflect the scope of data file that the kind of users is allowed to access. As any access policy can be represented as such a logical expression formula, fine-grained access control can be accomplished.

KW - Access Control

KW - Cloud Computing

KW - Encryption

UR - http://www.scopus.com/inward/record.url?scp=84856182942&partnerID=8YFLogxK

U2 - 10.1109/TrustCom.2011.14

DO - 10.1109/TrustCom.2011.14

M3 - Conference article published in proceeding or book

SN - 9780769546001

SP - 83

EP - 90

BT - Proc. 10th IEEE Int. Conf. on Trust, Security and Privacy in Computing and Communications, TrustCom 2011, 8th IEEE Int. Conf. on Embedded Software and Systems, ICESS 2011, 6th Int. Conf. FCST 2011

T2 - 10th IEEE Int. Conf. on Trust, Security and Privacy in Computing and Communications, TrustCom 2011, 8th IEEE Int. Conf. on Embedded Software and Systems, ICESS 2011, 6th Int. Conf. on Frontier of Computer Science and Technology, FCST 2011

Y2 - 16 November 2011 through 18 November 2011

ER -

Privacy-preserved access control for cloud computing

Abstract

Conference

Keywords

ASJC Scopus subject areas

More information

Other files and links

Fingerprint

Cite this