PrivacyPreservingDelegatedAccessControlinPublic…：保护隐私的授权访问控制在公共….docxVIP

Privacy Preserving Delegated Access Control in Public CloudsABSTRACT:Current approaches to enforcefine-grained access control on confidential data hosted in the cloud are based onfine-grained encryption of the data. Under such approaches, data owners are in charge of encrypting the data before uploadingthem on the cloud and re-encrypting the data whenever user credentials change. Data owners thus incur high communicationand computation costs. A better approach should delegate the enforcement offline-grained access control to the cloud, so tominimize the overhead at the data owners, while assuring data confidentiality from the cloud. We propose an approach, basedon two layers of encryption that addresses such requirement. Under our approach, the data owner performs a coarse-grainedencryption, whereas the cloud performs afine-grained encryption on top of the owner encrypted data. A challenging issue is howto decompose access control policies (ACPs) such that the two layer encryption can be performed. We show that this problemis NP-complete and propose novel optimization algorithms. We utilize an efficient group key management scheme that supportsexpressive ACPs. Our system assures the confidentiality of the data and preserves the privacy of users from the cloud whiledelegating most of the access control enforcement to the cloud.EXISTING SYSTEM:Many organizations have today ACPs regulating which users canaccess which data; these ACPs are often expressedin terms of the properties of the users, referred to asidentity attributes, using access control languages suchas XACML. Such an approach, referred to asattributebased access control (ABAC), supports fine-grainedaccess control which is crucial for high-assurancedata security and privacy. Supporting ABAC overencrypted data is a critical requirement in order toutilize cloud storage services for selective data sharingamong different users. Notice that often user identityattributes encode private information and should thusi