An Efficient Privacy-Preserving Access Control Scheme for Cloud Computing Services
Ling Zhu Xiong, Junkai Wang, Linsheng Yu, Naixue N. Xiong, Hanzhou Wu · IEEE Transactions on Consumer Electronics · 2025
To meet the future system requirements of Cloud Computing Services (CCSs) for large numbers of users, multiple services and high efficiency, authentication and access control technologies will evolve in a more secure and efficient direction. The integration of authentication and access control into a single module is critical to improving privacy and efficiency. However, current schemes may involve trade-offs and hard choices between privacy and efficiency. To overcome such limitations, our work proposes an efficient privacy-preserving scheme with integrated authentication and access control for CCSs environments. Unlike traditional authentication techniques, our scheme determines not only the legitimacy of the user’s identity but also the access permissions of remote users during the authentication process. Users will possess the capability to obtain entry to an array of cloud computing providers via utilization of a credential including the corresponding identity and permission. Moreover, the access permissions of different cloud service providers contained within a single credential are protected by a key-based Merkle tree technology to protect users’ privacy. That our proposed framework is impregnable within the context of the random oracle paradigm is indicated by the outcome of the security evaluation. Furthermore, the proposed framework exhibits superior computational and communicational proficiencies in contrast to relevant schemes. Therefore, this work effectively enhances the efficiency of services, which has important meaning for the use of the access control technology in CCSs environments.