ABR: A new efficient attribute based revocation on access control system

摘要

Nowadays Cloud computing services are becoming a necessity due to the huge evolution of internet technology and the need of outsourcing data into external servers. However, data externalization introduces several issues. Access control is one of the most challenging issues, it must ensure data confidentiality through enforced and flexible access policies. Revocation is one of the important tasks of access control process, generally, it consists on banishing some roles from users on the system. Ciphertext-policy attribute-based encryption is a promising cryptographic method. It provides fine-grained access which makes it very useful in case of group-sharing applications. However, the challenge of this method is the revocation. Through few past years, there have been many proposed revocation solutions on ABE, but these solutions still lack of efficiency. In this paper, we propose an access control mechanism with an immediate and efficient attributes or users revocation. Our solution uses CP-ABE for a flexible and fine grained access while it provides collusion resistance, supports scalability and does not require neither rekeying mechanisms nor keys redistribution.