Security analysis and improvement of cloud storage access control scheme

Security analysis and improvement of cloud storage access control scheme

Crown Fan Hong du Sea

For Tang Y,lee P,lui j,et al. Secure Overlay cloud storage with access control and assured deletion. A fine-grained access control scheme for cloud storage is proposed by IEEE transactions on dependable and Secure computing,2012,9 (6): 903-916 to analyze the security and find that it is not able to resist collusion attack. And the specific attack method is given. For the lack of security in this scenario, by using the attribute-based encryption algorithm to resist the collusion attack, the encryption (Cp-abe) algorithm using the access tree structure is improved so that the improved algorithm can be applied directly to the cloud storage access control scheme without any modification to the cloud storage server. At the same time, fine-grained access control and user data can be completely deleted. Finally, based on the hypothesis of bi-directional Deffie-hellman (DBDH), it is proved that the scheme is safe to select plaintext attack, and it proves that the improved scheme can resist collusion attack by applying the scheme to the real cloud environment.

Security analysis and improvement of cloud storage access control scheme