Achieving Secure, Scalable, and Fine-grained Data Access Control in Cloud Computing

—Cloud computing is an emerging computing paradigm in which resources of the computing infrastructure are provided as services over the Internet. As promising as it is, this paradigm also brings forth many new challenges for data security and access control when users outsource sensitive data for sharing on cloud servers, which are not within the same trusted domain as data owners. To keep sensitive user data confidential against untrusted servers, existing solutions usually apply cryptographic methods by disclosing data decryption keys only to authorized users. However, in doing so, these solutions inevitably introduce a heavy computation overhead on the data owner for key distribution and data management when finegrained data access control is desired, and thus do not scale well. The problem of simultaneously achieving fine-grainedness, scalability, and data confidentiality of access control actually still remains unresolved. This paper addresses this challenging open issue by,...

• Type: Journal
• Year: 2010
• Where: INFOCOM
• Authors: Shucheng Yu, Cong Wang, Kui Ren, Wenjing Lou
• Keywords: Access Control, Communications, Data Access, Data Owner, INFOCOM 2010