R&D: CEMAR, Fine Grained Access Control With Revocation Mechanism for Centralized Multi-Authority Cloud Storage

The Journal of Supercomputing has published an article written by K. Dhal, S. C. Rai, Department of CSE, Silicon Institute of Technology, Bhubaneswar, Odisha, India, P. K. Pattnaik, School of Computer Engineering, KIIT University, Bhubaneswar, Odisha, India, and S. Tripathy, Department of CSE, Indian Institute of Technology, Patna, Bhita, Bihar, India.

Abstract: “Nowadays, many users outsource their data to a remote cloud server. Access control techniques are an indispensable tool to prevent unauthorized users from accessing the data stored in the remote server. Ciphertext-policy attribute-based encryption (CP-ABE) would be a promising tool to resolve the secure data sharing issues in cloud computing to facilitate the authorized users to access their data. Many of the CP-ABE-based existing works suffer from higher computational at the user end. We propose a scheme named centralized multi-authority cloud storage with revocation (CEMAR) to withstand challenging scenarios. In the proposed model, the decryption process is partly outsourced to the cloud server to reduce the computational burden at the user end without violating its security. Besides this, the required key is stored in the cloud server to improve the communication cost of the decryption process. Further, we used the Random-Oracle assumption to establish the soundness of the model under the chosen plain text attack and showed that CEMAR is secure.“