Lightweight management of authorization update on cloud data

Cui, Z; Zhu, H; Shi, J; Chi, L; Yan, K

Lightweight management of authorization update on cloud data

Cui, Z Zhu, H Shi, J Chi, L Yan, K

Permalink

Publication Type:: Conference Proceeding
Citation:: Proceedings of the International Conference on Parallel and Distributed Systems - ICPADS, 2013, pp. 456 - 461
Issue Date:: 2013-01-01

Closed Access

	Filename	Description	Size
	2013003863OK.pdf		278.29 kB	Adobe PDF	View/Open

Copyright Clearance Process

Recently Added
In Progress
Closed Access

This item is closed access and not available.

Full metadata record

Field	Value	Language
dc.contributor.author	Cui, Z	en_US
dc.contributor.author	Zhu, H	en_US
dc.contributor.author	Shi, J	en_US
dc.contributor.author	Chi, L	en_US
dc.contributor.author	Yan, K	en_US
dc.date.issued	2013-01-01	en_US
dc.identifier.citation	Proceedings of the International Conference on Parallel and Distributed Systems - ICPADS, 2013, pp. 456 - 461	en_US
dc.identifier.isbn	9781479920815	en_US
dc.identifier.issn	1521-9097	en_US
dc.identifier.uri	http://hdl.handle.net/10453/28362
dc.description.abstract	While outsourcing data to cloud, security and efficiency issues should be taken into account. However, it is very challenging to design a secure and efficient mechanism supporting authorization updates. In this paper, we aim to provide a mechanism supporting authorization updates which only incurs a lightweight cost of authorization updates and meanwhile supports a high level of security. This mechanism is consisted of two encryption schemes performed in different layers. The inner-layer encryption scheme is performed on the original plaintext and the generated cipher text is called inner-layer cipher text, while a part of the inner-layer cipher text is encrypted by the outer-layer encryption scheme to generate cipher text, called out-layer cipher text. These two encryption schemes are both performed by data owner. The inner-layer encryption realizes the initial authorization policy, while the outer-layer encryption reflects the updated authorization policy. We implement the proposed mechanism and conduct extensive experiments. The experimental results demonstrate that the proposed mechanism outperforms previous existing approaches, e.g. single-layer encryption and double-layer encryption. © 2013 IEEE.	en_US
dc.relation.ispartof	Proceedings of the International Conference on Parallel and Distributed Systems - ICPADS	en_US
dc.relation.isbasedon	10.1109/ICPADS.2013.83	en_US
dc.title	Lightweight management of authorization update on cloud data	en_US
dc.type	Conference Proceeding
utslib.for	0805 Distributed Computing	en_US
dc.location.activity	Seoul, Korea	en_US
pubs.embargo.period	Not known	en_US
pubs.organisational-group	/University of Technology Sydney
pubs.organisational-group	/University of Technology Sydney/Faculty of Engineering and Information Technology
utslib.copyright.status	closed_access
pubs.publication-status	Published	en_US

Abstract:

While outsourcing data to cloud, security and efficiency issues should be taken into account. However, it is very challenging to design a secure and efficient mechanism supporting authorization updates. In this paper, we aim to provide a mechanism supporting authorization updates which only incurs a lightweight cost of authorization updates and meanwhile supports a high level of security. This mechanism is consisted of two encryption schemes performed in different layers. The inner-layer encryption scheme is performed on the original plaintext and the generated cipher text is called inner-layer cipher text, while a part of the inner-layer cipher text is encrypted by the outer-layer encryption scheme to generate cipher text, called out-layer cipher text. These two encryption schemes are both performed by data owner. The inner-layer encryption realizes the initial authorization policy, while the outer-layer encryption reflects the updated authorization policy. We implement the proposed mechanism and conduct extensive experiments. The experimental results demonstrate that the proposed mechanism outperforms previous existing approaches, e.g. single-layer encryption and double-layer encryption. © 2013 IEEE.

Please use this identifier to cite or link to this item:

http://hdl.handle.net/10453/28362