Sie befinden Sich nicht im Netzwerk der Universität Paderborn. Der Zugriff auf elektronische Ressourcen ist gegebenenfalls nur via VPN oder Shibboleth (DFN-AAI) möglich. mehr Informationen...
MAVP-FE: Multi-Authority Vector Policy Functional Encryption with Efficient Encryption and Decryption
Ist Teil von
China communications, 2015-06, Vol.12 (6), p.126-140
Ort / Verlag
China Institute of Communications
Erscheinungsjahr
2015
Quelle
IEEE Electronic Library (IEL)
Beschreibungen/Notizen
In cloud, data access control is a crucial wayto ensure data security. Function- al encryption (FE) is a novel cryptographic primitive supporting fine-grained access con- trol of encrypted data in cloud. In FE, every ciphertext is specified with an access policy, a decryptor can access the data if and only if his secret key matches with the access policy. However, the FE cannot be directly applied to construct access control scheme due to the exposure of the access policy which may contain sensitive information. In this paper, we deal with the policy privacy issue and present a mechanism named multi-authority vector policy (MAVP) which provides hidden and expressive access policy for FE. Firstly, each access policy is encoded as a matrix and decryptors can only obtain the matched result from the matrix in MAVP. Then, we design a novel function encryption scheme based on the multi-authority spatial policy (MAVP- FE), which can support privacy-preserving yet non-monotone access policy. Moreover, we greatly improve the efficiency of encryption and decryption in MAVP-FE by shifting the major computation of clients to the outsourced server. Finally, the security and performance analysis show that our MAVP-FE is secure and efficient in practice.