Secure and Revocable Multi-authority CP-ABE for Mobile Cloud Computing
摘要
Mobile cloud computing (MCC) enhances mobile device capabilities with cloud-based resources, allowing mobile users to outsource more data to the cloud to enjoy services of interest. It uses ciphertext policy attribute-based encryption (CP-ABE) to ensure the security and privacy of outsourced data and to implement fine-grained access control of data. However, the existing CP-ABE schemes exhibit the key escrow problem on the central authority and fail to grant data users full control over their identity which may expose user privacy. This paper proposes a multi-authority CP-ABE scheme to solve the key escrow problem and lack of user attribute privacy in the current literature. We design a novel SSI-aware communication model and seamlessly integrate it with our multi-authority CP-ABE to protect user identity privacy and strengthen the user’s sovereignty over their identity. We show how to conduct attribute revocation in our system. We prove security under the Decisional Bilinear Diffie-Hellman assumption. This research contributes to the existing body of knowledge on secure and privacy-preserving data sharing in the mobile cloud.