IEICE TRANSACTIONS on Information
Achieving Scalable and Optimized Attribute Revocation in Cloud Computing
Summary :
Revocation is one of the major problems for access control systems. Especially, the revocation cost for the data outsourced in the third party environment such as cloud storage systems. The revocation in the cloud-based access control typically deals with the cryptographic operations that introduce costly overheads for key re-generation, file re-encryption, and key re-distribution. Also, the communication for retrieving files for re-encryption and loading them back to the cloud is another non-trivial cost for data owners. In this paper, we propose a Very Lightweight Proxy Re-Encryption (VL-PRE) scheme to efficiently support attribute-based revocation and policy update in the collaborative data sharing in cloud computing environment. To this end, we propose three-phase VL-PRE protocol including re-encryption key generation, re-encryption key update, and re-encryption key renewal for supporting the optimized attribute revocation and policy update. Finally, we conduct the experiments to evaluate the performance of our VL-PRE and show that it exhibits less computation cost with higher scalability in comparison with existing PRE schemes.
- Publication
- IEICE TRANSACTIONS on Information Vol.E100-D No.5 pp.973-983
- Publication Date
- 2017/05/01
- Publicized
- 2017/02/08
- Online ISSN
- 1745-1361
- DOI
- 10.1587/transinf.2016NTP0006
- Type of Manuscript
- Special Section PAPER (Special Section on the Architectures, Protocols, and Applications for the Future Internet)
- Category
Authors
Somchart FUGKEAW
The University of Tokyo
Hiroyuki SATO
The University of Tokyo
Keyword
Latest Issue
Copyrights notice of machine-translated contents
The copyright of the original papers published on this site belongs to IEICE. Unauthorized use of the original or translated papers is prohibited. See IEICE Provisions on Copyright for details.
Cite this
Copy
Somchart FUGKEAW, Hiroyuki SATO, "Achieving Scalable and Optimized Attribute Revocation in Cloud Computing" in IEICE TRANSACTIONS on Information,
vol. E100-D, no. 5, pp. 973-983, May 2017, doi: 10.1587/transinf.2016NTP0006.
Abstract: Revocation is one of the major problems for access control systems. Especially, the revocation cost for the data outsourced in the third party environment such as cloud storage systems. The revocation in the cloud-based access control typically deals with the cryptographic operations that introduce costly overheads for key re-generation, file re-encryption, and key re-distribution. Also, the communication for retrieving files for re-encryption and loading them back to the cloud is another non-trivial cost for data owners. In this paper, we propose a Very Lightweight Proxy Re-Encryption (VL-PRE) scheme to efficiently support attribute-based revocation and policy update in the collaborative data sharing in cloud computing environment. To this end, we propose three-phase VL-PRE protocol including re-encryption key generation, re-encryption key update, and re-encryption key renewal for supporting the optimized attribute revocation and policy update. Finally, we conduct the experiments to evaluate the performance of our VL-PRE and show that it exhibits less computation cost with higher scalability in comparison with existing PRE schemes.
URL: https://global.ieice.org/en_transactions/information/10.1587/transinf.2016NTP0006/_p
Copy
@ARTICLE{e100-d_5_973,
author={Somchart FUGKEAW, Hiroyuki SATO, },
journal={IEICE TRANSACTIONS on Information},
title={Achieving Scalable and Optimized Attribute Revocation in Cloud Computing},
year={2017},
volume={E100-D},
number={5},
pages={973-983},
abstract={Revocation is one of the major problems for access control systems. Especially, the revocation cost for the data outsourced in the third party environment such as cloud storage systems. The revocation in the cloud-based access control typically deals with the cryptographic operations that introduce costly overheads for key re-generation, file re-encryption, and key re-distribution. Also, the communication for retrieving files for re-encryption and loading them back to the cloud is another non-trivial cost for data owners. In this paper, we propose a Very Lightweight Proxy Re-Encryption (VL-PRE) scheme to efficiently support attribute-based revocation and policy update in the collaborative data sharing in cloud computing environment. To this end, we propose three-phase VL-PRE protocol including re-encryption key generation, re-encryption key update, and re-encryption key renewal for supporting the optimized attribute revocation and policy update. Finally, we conduct the experiments to evaluate the performance of our VL-PRE and show that it exhibits less computation cost with higher scalability in comparison with existing PRE schemes.},
keywords={},
doi={10.1587/transinf.2016NTP0006},
ISSN={1745-1361},
month={May},}
Copy
TY - JOUR
TI - Achieving Scalable and Optimized Attribute Revocation in Cloud Computing
T2 - IEICE TRANSACTIONS on Information
SP - 973
EP - 983
AU - Somchart FUGKEAW
AU - Hiroyuki SATO
PY - 2017
DO - 10.1587/transinf.2016NTP0006
JO - IEICE TRANSACTIONS on Information
SN - 1745-1361
VL - E100-D
IS - 5
JA - IEICE TRANSACTIONS on Information
Y1 - May 2017
AB - Revocation is one of the major problems for access control systems. Especially, the revocation cost for the data outsourced in the third party environment such as cloud storage systems. The revocation in the cloud-based access control typically deals with the cryptographic operations that introduce costly overheads for key re-generation, file re-encryption, and key re-distribution. Also, the communication for retrieving files for re-encryption and loading them back to the cloud is another non-trivial cost for data owners. In this paper, we propose a Very Lightweight Proxy Re-Encryption (VL-PRE) scheme to efficiently support attribute-based revocation and policy update in the collaborative data sharing in cloud computing environment. To this end, we propose three-phase VL-PRE protocol including re-encryption key generation, re-encryption key update, and re-encryption key renewal for supporting the optimized attribute revocation and policy update. Finally, we conduct the experiments to evaluate the performance of our VL-PRE and show that it exhibits less computation cost with higher scalability in comparison with existing PRE schemes.
ER -
English
