A Secure Anonymous Identity-Based Access Control over Cloud Data

Abstract

Cloud computing is an emerging computing paradigm in which resources of the computing infrastructure are provided as services over the Internet. This paradigm also brings forth many new challenges for data security and access control when users outsource sensitive data for sharing on cloud servers. To access the data stored in cloud, existing work usually apply cryptographic methods such as attribute-based encryption. However, in doing so, these solutions inevitably leak the attribute and identity information of the users. For the purpose of secure access control in cloud computing while keeping the user's privacy, we propose the notion of identity-based group signature and apply it to realize the anonymous authentication to the cloud servers. Furthermore, both the user grant and revocation are supported by using the group techniques.