Logo image
Polynomial-Based Revocation for Attribute-Based Access Control in Secure Cloud Data Sharing
Book chapter

Polynomial-Based Revocation for Attribute-Based Access Control in Secure Cloud Data Sharing

Yanyang Meng, Meng Wang, Zhibo Sun, Delei Wang and Hong Zhang
Web and Big Data, pp 605-620
2027
Featured in Collection :   Drexel's Newest Publications

Abstract

Access control attribute revocation CP-ABE data sharing Cloud Computing
With the widespread adoption of cloud computing, Ciphertext-Policy Attribute-Based Encryption (CP-ABE) has become a promising primitive for fine-grained access control over outsourced data. However, efficient attribute revocation remains a challenging issue in dynamic cloud data sharing, especially when a specific attribute of a user becomes invalid while the user’s other attributes and the same attribute held by other users remain valid. Existing revocation mechanisms often require secret-key updates for non-revoked users, ciphertext re-encryption, or additional update metadata, which limits their scalability in practical cloud environments. In this paper, we propose PBER-ABE, a polynomial-based and efficiently revocable CP-ABE scheme for secure cloud data sharing. The proposed scheme associates each attribute with a selector polynomial over the authorized user set and defines revocation over user-attribute pairs. Using compact coefficient commitments, the cloud server can update only the affected ciphertext components during revocation and reactivation, without learning the plaintext or requiring non-revoked users to update their long-term secret keys. We also incorporate an attribute authentication mechanism to protect user identity privacy and prevent impersonation attacks. The security analysis shows that PBER-ABE achieves data confidentiality, forward and backward security, and resistance to collusion attacks. Theoretical analysis and experimental results demonstrate that PBER-ABE provides efficient revocation and low user-side decryption overhead, making it suitable for large-scale and fine-grained cloud data sharing.

Metrics

1 Record Views

Details

Logo image