An Efficiently Revocable Cloud-based Access Control Using Proxy Re-encryption and Blockchain
Khanadech Worapaluk, Somchart Fugkeaw · 2023
Existing cloud-based access control schemes employing ciphertext-policy attribute-based encryption (CP-ABE) generally achieve secure and fine-grained data sharing. However, most works have not taken the full support of both user and attribute revocation with the auditability of revocation transactions in their core contributions. In this paper, we proposed a blockchain-assisted cloud-based access control scheme composing a set of cryptographic protocols leveraging CP-ABE and blockchain technology to deliver an optimized user and attribute revocation cost which is capable of efficiently handling both users and attribute revocation with the auditable feature. Specifically, we devised cryptographic protocols to work with the blockchain and smart contracts to handle user authentication checking, cryptographic processes, and revocation management for data outsourced in the cloud. To evaluate the efficiency of our proposed scheme, we run experiments to show that the performance of ciphertext re-encryption and key update is efficient and implementable.