Achieving Data Access Control in Cloud Computing.pdfVIP

1 Achieving Secure, Scalable, and Fine-grained Data Access Control in Cloud Computing ? ? ? ? Shucheng Yu , Cong Wang , Kui Ren , and Wenjing Lou ?Dept. of ECE, Worcester Polytechnic Institute, Email: yscheng, wjlou @ece.wpi.edu ?Dept. of ECE, Illinois Institute of Technology, Email: cwang, kren @ece.iit.edu Abstract—Cloud computing is an emerging computing Promising as it is, cloud computing is also facing many paradigm in which resources of the computing infrastructure challenges that, if not well resolved, may impede its fast are provided as services over the Internet. Promising as it growth. Data security, as it exists in many other applications, is, this paradigm also brings forth many new challenges for data security and access control when users outsource sensitive is among these challenges that would raise extreme concerns data for sharing on cloud servers, which are not within the from users when they store sensitive information in cloud same trust domain of data owners. To keep sensitive user data servers. These concerns originate from the fact that cloud con?dential from untrusted servers, existing work usually apply servers are usually operated by commercial providers which cryptographic methods by disclosing data decryption keys only to are very likely to be out of the trust domain of the users. Users authorized users. However, in doing so, these solutions inevitably introduce heavy computation overhead on the data owner for key hence would intend to keep their data con?dential to cloud distribution and data management when ?ne-grained data access servers when storing data on them. In some practical applica- control is desired, and thus do not scale well. The problem of tion systems, data con?dentiality is not only a security/privacy simultaneously achieving ?ne-grainedness,