A Blockchain-Based Secure Cloud Files Sharing Scheme with Fine-Grained Access Control

Privacy protection and open sharing are the core of data governance in the AI-driven era. A common data-sharing management platform is indispensable in the existing data-sharing solutions, and users upload their data to the cloud server for storage and dissemination. However, from the moment users upload the data to the server, they will lose absolute ownership of their data, and security and privacy will become a critical issue. Although data encryption and access control are considered up-and-coming technologies in protecting personal data security on the cloud server, they alleviate this problem to a certain extent. However, it still depends too much on a third-party organization’s credibility, the Cloud Service Provider (CSP). In this paper, we combined blockchain, ciphertext-policy attribute-based encryption (CP-ABE), and InterPlanetary File System (IPFS) to address this problem to propose a blockchain-based security sharing scheme for personal data named BSSPD. In this user-centric scheme, the data owner encrypts the sharing data and stores it on IPFS, which maximizes the scheme’s decentralization. The address and the decryption key of the shared data will be encrypted with CP-ABE according to the specific access policy, and the data owner uses blockchain to publish his data-related information and distribute keys for data users. Only the data user whose attributes meet the access policy can download and decrypt the data. The data owner has fine-grained access control over his data, and BSSPD supports an attribute-level revocation of a specific data user without affecting others. To further protect the data user’s privacy, the ciphertext keyword search is used when retrieving data. We analyzed the security of the BBSPD and simulated our scheme on the EOS blockchain, which proved that our scheme is feasible. Meanwhile, we provided a thorough analysis of the storage and computing overhead, which proved that BSSPD has a good performance.

Download Full-text

A Secure Revocable Fine-grained Access Control and Data Sharing Scheme for SCADA in IIoT Systems

IEEE Internet of Things Journal ◽

10.1109/jiot.2021.3091760 ◽

2021 ◽

pp. 1-1

Author(s):

Weiting Zhang ◽

Hanyi Zhang ◽

Liming Fang ◽

Zhe Liu ◽

Chunpeng Ge

Keyword(s):

Access Control ◽

Data Sharing ◽

Fine Grained ◽

Sharing Scheme

Download Full-text

Personal health records sharing scheme based on attribute based signcryption with data integrity verifiable

Journal of Computer Security ◽

10.3233/jcs-210045 ◽

2021 ◽

pp. 1-34

Author(s):

Isaac Amankona Obiri ◽

Qi Xia ◽

Hu Xia ◽

Eric Affum ◽

Smahi Abla ◽

...

Keyword(s):

Access Control ◽

Keyword Search ◽

Data Integrity ◽

Personal Health Records ◽

Personal Health ◽

Health Records ◽

Fine Grained ◽

Sharing Scheme ◽

Query Result ◽

Cloud Server

The distribution of personal health records (PHRs) via a cloud server is a promising platform as it reduces the cost of data maintenance. Nevertheless, the cloud server is semi-trusted and can expose the patients’ PHRs to unauthorized third parties for financial gains or compromise the query result. Therefore, ensuring the integrity of the query results and privacy of PHRs as well as realizing fine-grained access control are critical key issues when PHRs are shared via cloud computing. Hence, we propose new personal health records sharing scheme with verifiable data integrity based on B+ tree data structure and attribute-based signcryption scheme to achieve data privacy, query result integrity, unforgeability, blind keyword search, and fine-grained access control.

Download Full-text

Fine-Grained Mandatory Query Access Control Model and Its Efficient Realization for Spatial Vector Data

Journal of Software ◽

10.3724/sp.j.1001.2011.03868 ◽

2011 ◽

Vol 22 (8) ◽

pp. 1872-1883 ◽

Cited By ~ 2

Author(s):

Yan ZHANG ◽

Chi CHEN ◽

Deng-Guo FENG

Keyword(s):

Access Control ◽

Control Model ◽

Vector Data ◽

Access Control Model ◽

Fine Grained ◽

Efficient Realization

Download Full-text

On the need for user-defined fine-grained access control policies for social networking applications

10.1145/1461469.1461470 ◽

2008 ◽

Cited By ~ 15

Author(s):

Andrew Simpson

Keyword(s):

Access Control ◽

Social Networking ◽

Control Policies ◽

Fine Grained ◽

Access Control Policies

Download Full-text

Privacy-Enhancing k-Nearest Neighbors Search over Mobile Social Networks

Sensors ◽

10.3390/s21123994 ◽

2021 ◽

Vol 21 (12) ◽

pp. 3994

Author(s):

Yuxi Li ◽

Fucai Zhou ◽

Yue Ge ◽

Zifeng Xu

Keyword(s):

Social Networks ◽

Access Control ◽

Location Privacy ◽

Nearest Neighbors ◽

Search Pattern ◽

Broadcast Encryption ◽

Mobile Social Networks ◽

K Nearest Neighbors ◽

Fine Grained ◽

Server Architecture

Focusing on the diversified demands of location privacy in mobile social networks (MSNs), we propose a privacy-enhancing k-nearest neighbors search scheme over MSNs. First, we construct a dual-server architecture that incorporates location privacy and fine-grained access control. Under the above architecture, we design a lightweight location encryption algorithm to achieve a minimal cost to the user. We also propose a location re-encryption protocol and an encrypted location search protocol based on secure multi-party computation and homomorphic encryption mechanism, which achieve accurate and secure k-nearest friends retrieval. Moreover, to satisfy fine-grained access control requirements, we propose a dynamic friends management mechanism based on public-key broadcast encryption. It enables users to grant/revoke others’ search right without updating their friends’ keys, realizing constant-time authentication. Security analysis shows that the proposed scheme satisfies adaptive L-semantic security and revocation security under a random oracle model. In terms of performance, compared with the related works with single server architecture, the proposed scheme reduces the leakage of the location information, search pattern and the user–server communication cost. Our results show that a decentralized and end-to-end encrypted k-nearest neighbors search over MSNs is not only possible in theory, but also feasible in real-world MSNs collaboration deployment with resource-constrained mobile devices and highly iterative location update demands.

Download Full-text