A lightweight access control mechanism for mobile cloud computing

Xuanxia Yao; Xiaoguang Han; Xiaojiang Du

doi:10.1109/INFCOMW.2014.6849262

A lightweight access control mechanism for mobile cloud computing

Xuanxia Yao, Xiaoguang Han, Xiaojiang Du

Department of Electrical and Computer Engineering

Stevens Institute of Technology

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

In order to meet the security requirement, most data are stored in cloud as cipher-texts. Hence, a cipher-text based access control mechanism is needed for data sharing in cloud. A popular solution is to use the attribute-based encryption. However, it is not suitable for mobile cloud due to the heavy computation overhead caused by bilinear pairing, which also makes it difficult to change the access control policy. In addition, attribute-based encryption can't achieve fine-grained access control yet. In this paper, we present a lightweight cipher-text access control mechanism for mobile cloud computing, which is based on authorization certificates and secret sharing. Only the certificate owner can reconstruct decryption keys for his/her files. Our analyses show that the mechanism can achieve efficient and fine-grained access control on cipher-text at a much lower cost than the attribute-based encryption solution.

Original language	English
Title of host publication	2014 IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2014
Publisher	Institute of Electrical and Electronics Engineers Inc.
Pages	380-385
Number of pages	6
ISBN (Print)	9781479930883
DOIs	https://doi.org/10.1109/INFCOMW.2014.6849262
State	Published - 2014
Event	2014 IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2014 - Toronto, ON, Canada Duration: Apr 27 2014 → May 2 2014

Publication series

Name	Proceedings - IEEE INFOCOM

Conference

Conference	2014 IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2014
Country/Territory	Canada
City	Toronto, ON
Period	4/27/14 → 5/2/14

ASJC Scopus subject areas

General Computer Science
Electrical and Electronic Engineering

Keywords

Authorization
access control
certificate
mobile cloud storage

Access to Document

10.1109/INFCOMW.2014.6849262

Cite this

@inproceedings{4715cdb978bb4cd7bea1083db235f6de,

title = "A lightweight access control mechanism for mobile cloud computing",

abstract = "In order to meet the security requirement, most data are stored in cloud as cipher-texts. Hence, a cipher-text based access control mechanism is needed for data sharing in cloud. A popular solution is to use the attribute-based encryption. However, it is not suitable for mobile cloud due to the heavy computation overhead caused by bilinear pairing, which also makes it difficult to change the access control policy. In addition, attribute-based encryption can't achieve fine-grained access control yet. In this paper, we present a lightweight cipher-text access control mechanism for mobile cloud computing, which is based on authorization certificates and secret sharing. Only the certificate owner can reconstruct decryption keys for his/her files. Our analyses show that the mechanism can achieve efficient and fine-grained access control on cipher-text at a much lower cost than the attribute-based encryption solution.",

keywords = "Authorization, access control, certificate, mobile cloud storage",

author = "Xuanxia Yao and Xiaoguang Han and Xiaojiang Du",

year = "2014",

doi = "10.1109/INFCOMW.2014.6849262",

language = "English",

isbn = "9781479930883",

series = "Proceedings - IEEE INFOCOM",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

pages = "380--385",

booktitle = "2014 IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2014",

note = "2014 IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2014 ; Conference date: 27-04-2014 Through 02-05-2014",

}

Yao, X, Han, X & Du, X 2014, A lightweight access control mechanism for mobile cloud computing. in 2014 IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2014., 6849262, Proceedings - IEEE INFOCOM, Institute of Electrical and Electronics Engineers Inc., pp. 380-385, 2014 IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2014, Toronto, ON, Canada, 4/27/14. https://doi.org/10.1109/INFCOMW.2014.6849262

A lightweight access control mechanism for mobile cloud computing. / Yao, Xuanxia; Han, Xiaoguang; Du, Xiaojiang.
2014 IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2014. Institute of Electrical and Electronics Engineers Inc., 2014. p. 380-385 6849262 (Proceedings - IEEE INFOCOM).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - A lightweight access control mechanism for mobile cloud computing

AU - Yao, Xuanxia

AU - Han, Xiaoguang

AU - Du, Xiaojiang

PY - 2014

Y1 - 2014

N2 - In order to meet the security requirement, most data are stored in cloud as cipher-texts. Hence, a cipher-text based access control mechanism is needed for data sharing in cloud. A popular solution is to use the attribute-based encryption. However, it is not suitable for mobile cloud due to the heavy computation overhead caused by bilinear pairing, which also makes it difficult to change the access control policy. In addition, attribute-based encryption can't achieve fine-grained access control yet. In this paper, we present a lightweight cipher-text access control mechanism for mobile cloud computing, which is based on authorization certificates and secret sharing. Only the certificate owner can reconstruct decryption keys for his/her files. Our analyses show that the mechanism can achieve efficient and fine-grained access control on cipher-text at a much lower cost than the attribute-based encryption solution.

AB - In order to meet the security requirement, most data are stored in cloud as cipher-texts. Hence, a cipher-text based access control mechanism is needed for data sharing in cloud. A popular solution is to use the attribute-based encryption. However, it is not suitable for mobile cloud due to the heavy computation overhead caused by bilinear pairing, which also makes it difficult to change the access control policy. In addition, attribute-based encryption can't achieve fine-grained access control yet. In this paper, we present a lightweight cipher-text access control mechanism for mobile cloud computing, which is based on authorization certificates and secret sharing. Only the certificate owner can reconstruct decryption keys for his/her files. Our analyses show that the mechanism can achieve efficient and fine-grained access control on cipher-text at a much lower cost than the attribute-based encryption solution.

KW - Authorization

KW - access control

KW - certificate

KW - mobile cloud storage

UR - http://www.scopus.com/inward/record.url?scp=84904513885&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84904513885&partnerID=8YFLogxK

U2 - 10.1109/INFCOMW.2014.6849262

DO - 10.1109/INFCOMW.2014.6849262

M3 - Conference contribution

SN - 9781479930883

T3 - Proceedings - IEEE INFOCOM

SP - 380

EP - 385

BT - 2014 IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2014

PB - Institute of Electrical and Electronics Engineers Inc.

T2 - 2014 IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS 2014

Y2 - 27 April 2014 through 2 May 2014

ER -

A lightweight access control mechanism for mobile cloud computing

Abstract

Publication series

Conference

ASJC Scopus subject areas

Keywords

Access to Document

Other files and links

Cite this