Abstract:

A privacy-aware access control scheme suitable for cloud storage is proposed in view of the inability of traditional access control methods to protect users' attribute privacy in cloud computing,.A hybrid encryption mechanism is adopted to realize data confidentiality,that is,encrypting plaintexts based on a symmetric encryption key which is encrypted by a public key encryption scheme.In the proposed access control scheme,a ciphertext-policy attribute-based encryption technique is used for public key encryption.The security analysis indicates that the proposed scheme achieves chosen-plaintext security and resists collusion attacks from malicious users and cloud storage servers while protecting users' attribute privacy.