PAbAC: A Privacy Preserving Attribute based Framework for Fine Grained Access Control in Clouds

Sana Belguith, Nesrine Kaaniche, Abderrazak Jemai, Maryline Laurent, Rabah Attia

2016

Abstract

Several existing access control solutions mainly focus on preserving confidentiality of stored data from unauthorized access and the storage provider. Moreover, to keep sensitive user data confidential against untrusted servers, existing solutions usually apply cryptographic methods by disclosing data decryption keys only to authorized users. However, these solutions inevitably introduce a heavy computation overhead on the data owner for key distribution and data management when fine-grained data access control is desired. In addition, access control policies as well as users’ access patterns are also considered as sensitive information that should be protected from the cloud. In this paper, we propose PAbAC, a novel privacy preserving Attribute-based framework, that combines attribute-based encryption and attribute-based signature mechanisms for securely sharing outsourced data via the public cloud. Our proposal is multifold. First, it ensures fine-grained cryptographic access control enforced at the data owner’s side, while providing the desired expressiveness of the access control policies. Second, PAbAC preserves users’ privacy, while hiding any identifying information used to satisfy the access control. Third, PAbAC is proven to be highly scalable and efficient for sharing outsourced data in remote servers, at both the client and the cloud provider side.

Paper Citation

in Harvard Style

Belguith S., Kaaniche N., Jemai A., Laurent M. and Attia R. (2016). PAbAC: A Privacy Preserving Attribute based Framework for Fine Grained Access Control in Clouds . In Proceedings of the 13th International Joint Conference on e-Business and Telecommunications - Volume 4: SECRYPT, (ICETE 2016) ISBN 978-989-758-196-0, pages 133-146. DOI: 10.5220/0005968201330146

in Bibtex Style

@conference{secrypt16,
author={Sana Belguith and Nesrine Kaaniche and Abderrazak Jemai and Maryline Laurent and Rabah Attia},
title={PAbAC: A Privacy Preserving Attribute based Framework for Fine Grained Access Control in Clouds},
booktitle={Proceedings of the 13th International Joint Conference on e-Business and Telecommunications - Volume 4: SECRYPT, (ICETE 2016)},
year={2016},
pages={133-146},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0005968201330146},
isbn={978-989-758-196-0},
}

in EndNote Style

TY - CONF
JO - Proceedings of the 13th International Joint Conference on e-Business and Telecommunications - Volume 4: SECRYPT, (ICETE 2016)
TI - PAbAC: A Privacy Preserving Attribute based Framework for Fine Grained Access Control in Clouds
SN - 978-989-758-196-0
AU - Belguith S.
AU - Kaaniche N.
AU - Jemai A.
AU - Laurent M.
AU - Attia R.
PY - 2016
SP - 133
EP - 146
DO - 10.5220/0005968201330146