A Hierarchical Attribute-Based EncryptionFor Mobile Cloud Data Security

Abstract

Cloud computing, as a promising computing model, enables users to remotely storetheir data into a cloud so as to enjoy scalable services on-demand. However, allowing Cloud Service Providers (CSPs), which are not in the same trusted domains as enterprise users, to take care of confidential data, may raise potential security and privacy issues. To keep the sensitive user data confidential against entrusted CSPs, a usual way is to apply cryptographic approaches, by disclosing decryption keys only to authorized users. However, when enterprise users outsource confidential data for sharing on cloud servers, the adopted encryption system should not only support fine-grained access control, but also provide high performance, full delegation, and scalability, so as to best serve the needs of accessing data anytime and anywhere, delegating within enterprises, and achieving a dynamic set of users. In this paper, we propose a scheme to help enterprises to efficiently share confidential data on cloud servers. We achieve this goal by first combining the Hierarchical Identity- Based Encryption (HIBE) system and the cipher text-policy Attribute-Based Encryption (CP-ABE) system.