Flexible Data Access Control Based on Trust and Reputation in Cloud Computing

Yan, Z; Li, X; Wang, M; Vasilakos, AV

Flexible Data Access Control Based on Trust and Reputation in Cloud Computing

Yan, Z Li, X Wang, M Vasilakos, AV

Permalink

Publisher:: Institute of Electrical and Electronics Engineers
Publication Type:: Journal Article
Citation:: IEEE Transactions on Cloud Computing, 2017, 5, (3), pp. 485-498
Issue Date:: 2017-07-01

Closed Access

	Filename	Description	Size
	Flexible_Data_Access_Control_Based_on_Trust_and_Reputation_in_Cloud_Computing.pdf		730.84 kB	Adobe PDF	View/Open

Copyright Clearance Process

Recently Added
In Progress
Closed Access

This item is closed access and not available.

Full metadata record

Field	Value	Language
dc.contributor.author	Yan, Z
dc.contributor.author	Li, X
dc.contributor.author	Wang, M
dc.contributor.author	Vasilakos, AV
dc.date.accessioned	2022-08-23T02:48:28Z
dc.date.available	2022-08-23T02:48:28Z
dc.date.issued	2017-07-01
dc.identifier.citation	IEEE Transactions on Cloud Computing, 2017, 5, (3), pp. 485-498
dc.identifier.issn	2168-7161
dc.identifier.issn	2168-7161
dc.identifier.uri	http://hdl.handle.net/10453/160721
dc.description.abstract	Cloud computing offers a new way of services and has become a popular service platform. Storing user data at a cloud data center greatly releases storage burden of user devices and brings access convenience. Due to distrust in cloud service providers, users generally store their crucial data in an encrypted form. But in many cases, the data need to be accessed by other entities for fulfilling an expected service, e.g., an eHealth service. How to control personal data access at cloud is a critical issue. Various application scenarios request flexible control on cloud data access based on data owner policies and application demands. Either data owners or some trusted third parties or both should flexibly participate in this control. However, existing work hasn't yet investigated an effective and flexible solution to satisfy this demand. On the other hand, trust plays an important role in data sharing. It helps overcoming uncertainty and avoiding potential risks. But literature still lacks a practical solution to control cloud data access based on trust and reputation. In this paper, we propose a scheme to control data access in cloud computing based on trust evaluated by the data owner and/or reputations generated by a number of reputation centers in a flexible manner by applying Attribue-Based Encryption and Proxy Re-Encryption. We integrate the concept of context-aware trust and reputation evaluation into a cryptographic system in order to support various control scenarios and strategies. The security and performance of our scheme are evaluated and justified through extensive analysis, security proof, comparison and implementation. The results show the efficiency, flexibility and effectiveness of our scheme for data access control in cloud computing.
dc.language	English
dc.publisher	Institute of Electrical and Electronics Engineers
dc.relation.ispartof	IEEE Transactions on Cloud Computing
dc.relation.isbasedon	10.1109/TCC.2015.2469662
dc.rights	info:eu-repo/semantics/closedAccess
dc.subject	0805 Distributed Computing, 0806 Information Systems
dc.title	Flexible Data Access Control Based on Trust and Reputation in Cloud Computing
dc.type	Journal Article
utslib.citation.volume	5
utslib.for	0805 Distributed Computing
utslib.for	0806 Information Systems
pubs.organisational-group	/University of Technology Sydney
pubs.organisational-group	/University of Technology Sydney/Faculty of Engineering and Information Technology
pubs.organisational-group	/University of Technology Sydney/Faculty of Engineering and Information Technology/School of Electrical and Data Engineering
utslib.copyright.status	closed_access	*
pubs.consider-herdc	false
dc.date.updated	2022-08-23T02:48:27Z
pubs.issue	3
pubs.publication-status	Published
pubs.volume	5
utslib.citation.issue	3

Abstract:

Cloud computing offers a new way of services and has become a popular service platform. Storing user data at a cloud data center greatly releases storage burden of user devices and brings access convenience. Due to distrust in cloud service providers, users generally store their crucial data in an encrypted form. But in many cases, the data need to be accessed by other entities for fulfilling an expected service, e.g., an eHealth service. How to control personal data access at cloud is a critical issue. Various application scenarios request flexible control on cloud data access based on data owner policies and application demands. Either data owners or some trusted third parties or both should flexibly participate in this control. However, existing work hasn't yet investigated an effective and flexible solution to satisfy this demand. On the other hand, trust plays an important role in data sharing. It helps overcoming uncertainty and avoiding potential risks. But literature still lacks a practical solution to control cloud data access based on trust and reputation. In this paper, we propose a scheme to control data access in cloud computing based on trust evaluated by the data owner and/or reputations generated by a number of reputation centers in a flexible manner by applying Attribue-Based Encryption and Proxy Re-Encryption. We integrate the concept of context-aware trust and reputation evaluation into a cryptographic system in order to support various control scenarios and strategies. The security and performance of our scheme are evaluated and justified through extensive analysis, security proof, comparison and implementation. The results show the efficiency, flexibility and effectiveness of our scheme for data access control in cloud computing.

Please use this identifier to cite or link to this item:

http://hdl.handle.net/10453/160721