Skip to main content
placeholder image

Dual Access Control for Cloud-Based Data Storage and Sharing

Journal Article


Abstract


  • Cloud-based data storage service has drawn increasing interests from both academic and industry in the recent years due to its efficient and low cost management. Since it provides services in an open network, it is urgent for service providers to make use of secure data storage and sharing mechanism to ensure data confidentiality and service user privacy. To protect sensitive data from being compromised, the most widely used method is encryption. However, simply encrypting data (e.g., via AES) cannot fully address the practical need of data management. Besides, an effective access control over download request also needs to be considered so that Economic Denial of Sustainability (EDoS) attacks cannot be launched to hinder users from enjoying service. In this article, we consider the dual access control, in the context of cloud-based storage, in the sense that we design a control mechanism over both data access and download request without loss of security and efficiency. Two dual access control systems are designed in this article, where each of them is for a distinct designed setting. The security and experimental analysis for the systems are also presented.

Publication Date


  • 2022

Citation


  • Ning, J., Huang, X., Susilo, W., Liang, K., Liu, X., & Zhang, Y. (2022). Dual Access Control for Cloud-Based Data Storage and Sharing. IEEE Transactions on Dependable and Secure Computing, 19(2), 1036-1048. doi:10.1109/TDSC.2020.3011525

Scopus Eid


  • 2-s2.0-85127577750

Start Page


  • 1036

End Page


  • 1048

Volume


  • 19

Issue


  • 2

Abstract


  • Cloud-based data storage service has drawn increasing interests from both academic and industry in the recent years due to its efficient and low cost management. Since it provides services in an open network, it is urgent for service providers to make use of secure data storage and sharing mechanism to ensure data confidentiality and service user privacy. To protect sensitive data from being compromised, the most widely used method is encryption. However, simply encrypting data (e.g., via AES) cannot fully address the practical need of data management. Besides, an effective access control over download request also needs to be considered so that Economic Denial of Sustainability (EDoS) attacks cannot be launched to hinder users from enjoying service. In this article, we consider the dual access control, in the context of cloud-based storage, in the sense that we design a control mechanism over both data access and download request without loss of security and efficiency. Two dual access control systems are designed in this article, where each of them is for a distinct designed setting. The security and experimental analysis for the systems are also presented.

Publication Date


  • 2022

Citation


  • Ning, J., Huang, X., Susilo, W., Liang, K., Liu, X., & Zhang, Y. (2022). Dual Access Control for Cloud-Based Data Storage and Sharing. IEEE Transactions on Dependable and Secure Computing, 19(2), 1036-1048. doi:10.1109/TDSC.2020.3011525

Scopus Eid


  • 2-s2.0-85127577750

Start Page


  • 1036

End Page


  • 1048

Volume


  • 19

Issue


  • 2