CoChat
Sign Up
Cited by 176Cryptography and Data SecurityCloud Data Security SolutionsBlockchain Technology Applications and Security

The DOI matches its Crossref record.

Attribute-based Encryption for Cloud Computing Access Control: A Survey

Zhang, Yinghui, Deng, Robert H., Xu, Shengmin, Sun, Jianfei, Li, Qi, Zheng, Dong·2021·ACM Computing Surveys
DOI 10.1145/3398036
Open this paper in CoChat — free account

Abstract

Attribute-based encryption (ABE) for cloud computing access control is reviewed in this article. A taxonomy and comprehensive assessment criteria of ABE are first proposed. In the taxonomy, ABE schemes are assorted into key-policy ABE (KP-ABE) schemes, ciphertext-policy ABE (CP-ABE) schemes, anti-quantum ABE schemes, and generic constructions. In accordance with cryptographically functional features, CP-ABE is further divided into nine subcategories with regard to basic functionality, revocation, accountability, policy hiding, policy updating, multi-authority, hierarchy, offline computation, and outsourced computation. In addition, a systematical methodology for discussing and comparing existing ABE schemes is proposed. For KP-ABE and each type of CP-ABE, the corresponding access control scenario is presented and explained by concrete examples. Specifically, the syntax of ABE is given followed by the adversarial model and security goals. ABE schemes are discussed according to the design strategies and special features and are compared in the light of the proposed assessment criteria with respect to security and performance. Compared to related state-of-the-art survey papers, this article not only provides a broader 12 categories of ABE schemes, but also makes a more comprehensive and holistic comparison. Finally, a number of open research challenges in ABE are pointed out.

Overview

Integrity signals

Registry

Crossref · 10.1145/3398036

Cites

Statistics

Recomputing p-values needs the paper’s full text.

Verification

Claims the paper makes

This paper’s full text isn’t openly available, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • Based on access control policy, ABE can be classified as key-policy ABE (KP-ABE), ciphertext-policy ABE (CP-ABE), anti-quantum ABE (AQ-ABE), and generic ABE (G-ABE).

    “Based on access control policy, ABE can be classified as key-police ABE ( KP-ABE ), ciphertext-police ABE ( CP-ABE ), anti-quantum ABE ( AQ-ABE ) and generic ABE ( G-ABE ) [157].”

    From A Deep Dive into Fairness, Bias, Threats, and Privacy in Recommender Systems: Insights and Future Research (2024) · cites this paper as [157]

Citations

Cites

No references could be resolved yet.

Research works printed but not linked: 119

  1. 10.1145/3133956.3134014 · DOI
  2. 10.3390/s19071695 · DOI
  3. Nuttapong Attrapadung and Hideki Imai . 2009. Conjunctive broadcast and attribute-based encryption. Pairing-Based Cryptog.–Pairing’09 , Vol. 5671 . Springer , 248--265. Nuttapong Attrapadung and Hideki Imai. 2009. Conjunctive broadcast and attribute-based encryption. Pairing-Based Cryptog.–Pairing’09, Vol. 5671. Springer, 248--265.
  4. 10.1145/168588.168596 · DOI
  5. 10.1109/SP.2007.11 · DOI · Paper page
  6. 10.1007/BFb0054122 · DOI
  7. 10.1007/978-3-540-24676-3_4 · DOI
  8. 10.1007/3-540-44647-8_13 · DOI
  9. 10.1007/978-3-319-39555-5_15 · DOI
  10. 10.1007/978-3-540-70936-7_28 · DOI · Paper page
  11. Melissa Chase and Sherman S. M. Chow . 2009. Improving privacy and security in multi-authority attribute-based encryption . In Proceedings of the 16th ACM Conference on Computer and Communications Security (CCS’09) . ACM, 121--130. Melissa Chase and Sherman S. M. Chow. 2009. Improving privacy and security in multi-authority attribute-based encryption. In Proceedings of the 16th ACM Conference on Computer and Communications Security (CCS’09). ACM, 121--130.
  12. 10.1145/1315245.1315302 · DOI
  13. 10.1093/comjnl/bxw007 · DOI
  14. 10.1007/978-3-319-45741-3_29 · DOI
  15. 10.1109/TCC.2017.2754255 · DOI
  16. 10.1016/j.ins.2014.01.035 · DOI
  17. 10.1109/TC.2013.83 · DOI
  18. 10.1007/3-540-48329-2_40 · DOI
  19. 10.1016/j.jss.2017.10.020 · DOI
  20. Gartner. 2019. Gartner forecasts worldwide public cloud revenue to grow 17.5 percent in 2019 . Retrieved from https://www.gartner.com/en/newsroom/press-releases/2019-04-02-gartner-forecasts-worldwide-public-cloud-revenue-to-g. Gartner. 2019. Gartner forecasts worldwide public cloud revenue to grow 17.5 percent in 2019. Retrieved from https://www.gartner.com/en/newsroom/press-releases/2019-04-02-gartner-forecasts-worldwide-public-cloud-revenue-to-g.
  21. 10.1007/978-3-540-70583-3_47 · DOI
  22. 10.5555/2028067.2028101 · DOI
  23. 10.1007/978-3-319-11212-1_5 · DOI
  24. 10.1007/978-3-642-13013-7_2 · DOI
  25. 10.1007/978-3-642-54631-0_17 · DOI
  26. 10.1109/TPDS.2012.61 · DOI
  27. 10.1109/TKDE.2011.78 · DOI
  28. 10.1109/TPDS.2010.203 · DOI
  29. 10.1016/j.future.2017.01.026 · DOI
  30. 10.1007/s10207-017-0388-7 · DOI
  31. 10.1109/TIFS.2014.2368352 · DOI
  32. 10.1016/j.jnca.2018.02.009 · DOI
  33. 10.1109/TIFS.2013.2271848 · DOI
  34. 10.1007/978-3-642-21031-0_3 · DOI
  35. 10.1145/2414456.2414465 · DOI
  36. 10.1007/978-3-642-42033-7_13 · DOI
  37. 10.1007/978-3-642-13190-5_4 · DOI · Paper page
  38. 10.1007/978-3-642-20465-4_31 · DOI
  39. 10.1007/978-3-642-32009-5_12 · DOI
  40. 10.1109/TPDS.2013.271 · DOI
  41. 10.1007/978-3-642-04474-8_28 · DOI
  42. 10.1007/s11036-010-0233-y · DOI
  43. Jiguo Li , Yao Wang , Yichen Zhang , and Jinguang Han . 2017. Full verifiability for outsourced decryption in attribute based encryption . IEEE Trans. Serv. Comput. ( 2017 ). Retrieved from http://dx.doi.org/10.1109/TSC.2017.2710190. 10.1109/TSC.2017.2710190 Jiguo Li, Yao Wang, Yichen Zhang, and Jinguang Han. 2017. Full verifiability for outsourced decryption in attribute based encryption. IEEE Trans. Serv. Comput. (2017). Retrieved from http://dx.doi.org/10.1109/TSC.2017.2710190. · DOI
  44. 10.1109/JSYST.2017.2667679 · DOI
  45. 10.1016/j.ins.2019.01.052 · DOI
  46. 10.1016/j.cose.2017.08.007 · DOI
  47. 10.1109/TPDS.2012.97 · DOI
  48. 10.1016/j.cose.2016.02.002 · DOI
  49. 10.1016/j.future.2014.11.016 · DOI
  50. 10.1145/1533057.1533094 · DOI
  51. 10.1145/1533057.1533102 · DOI
  52. 10.1007/978-3-540-89754-5_33 · DOI
  53. 10.1109/TIFS.2015.2449264 · DOI
  54. 10.1007/978-3-319-93387-0_27 · DOI
  55. 10.1016/j.ins.2012.09.034 · DOI
  56. 10.1007/978-3-642-23822-2_16 · DOI
  57. Zhen Liu , Zhenfu Cao , and Duncan S. Wong . 2012 . White-box traceable ciphertext-policy attribute-based encryption supporting any monotone access structures . IEEE Trans. Inf. Forens. Sec. 8 , 1 (2012), 76 -- 88 . Zhen Liu, Zhenfu Cao, and Duncan S. Wong. 2012. White-box traceable ciphertext-policy attribute-based encryption supporting any monotone access structures. IEEE Trans. Inf. Forens. Sec. 8, 1 (2012), 76--88. · DOI
  58. Zhen Liu , Zhenfu Cao , and Duncan S. Wong . 2013. Blackbox traceable CP-ABE: How to catch people leaking their keys by selling decryption devices on eBay . In Proceedings of the 20th ACM Conference on Computer and Communications Security (CCS’13) . ACM, 475--486. Zhen Liu, Zhenfu Cao, and Duncan S. Wong. 2013. Blackbox traceable CP-ABE: How to catch people leaking their keys by selling decryption devices on eBay. In Proceedings of the 20th ACM Conference on Computer and Communications Security (CCS’13). ACM, 475--486.
  59. 10.1016/j.future.2017.09.045 · DOI
  60. 10.1002/cpe.3915 · DOI
  61. 10.1093/comjnl/bxv101 · DOI
  62. 10.1007/978-3-642-17650-0_28 · DOI
  63. 10.1109/TDSC.2015.2499755 · DOI
  64. 10.1007/978-3-319-98989-1_25 · DOI
  65. 10.1145/3052973.3052987 · DOI
  66. 10.1007/978-3-319-45741-3_28 · DOI
  67. 10.1109/TIFS.2017.2738601 · DOI
  68. 10.1007/978-3-319-24177-7_14 · DOI
  69. 10.1109/TIFS.2015.2405905 · DOI
  70. 10.1007/978-3-540-68914-0_7 · DOI
  71. 10.1016/j.cose.2018.10.012 · DOI
  72. 10.1007/978-3-642-14623-7_11 · DOI
  73. 10.1109/TIFS.2015.2475723 · DOI
  74. Tran Viet Xuan Phuong , Guomin Yang , Willy Susilo , and Xiaofeng Chen . 2015 . Attribute based broadcast encryption with short ciphertext and decryption key . In Proceedings of the European Symposium on Research in Computer Security (ESORICS’15) , Vol. 9327 . Springer, 252--269. Tran Viet Xuan Phuong, Guomin Yang, Willy Susilo, and Xiaofeng Chen. 2015. Attribute based broadcast encryption with short ciphertext and decryption key. In Proceedings of the European Symposium on Research in Computer Security (ESORICS’15), Vol. 9327. Springer, 252--269.
  75. 10.1109/TIFS.2015.2410137 · DOI
  76. 10.1016/j.ins.2019.03.053 · DOI
  77. Shuo Qiu , Jiqiang Liu , Yanfeng Shi , and Rui Zhang . 2017 . Hidden policy ciphertext-policy attribute-based encryption with keyword search against keyword guessing attack. Sci . China Inf. Sci. 60 , 5 (2017), 1 -- 12 . Shuo Qiu, Jiqiang Liu, Yanfeng Shi, and Rui Zhang. 2017. Hidden policy ciphertext-policy attribute-based encryption with keyword search against keyword guessing attack. Sci. China Inf. Sci. 60, 5 (2017), 1--12.
  78. 10.1145/2508859.2516672 · DOI
  79. 10.1007/978-3-662-47854-7_19 · DOI
  80. 10.1007/978-3-642-32009-5_13 · DOI
  81. 10.1007/11426639_27 · DOI
  82. 10.1007/978-3-540-30574-3_20 · DOI
  83. 10.1007/3-540-69053-0_18 · DOI
  84. 10.1016/j.future.2016.08.018 · DOI
  85. 10.1016/j.ins.2017.11.037 · DOI
  86. TechFunnel. 2018. Top 5 cloud computing predictions for 2020 . Retrieved from https://www.techfunnel.com/information-technology/top-5-cloud-computing-predictions-for-2020. TechFunnel. 2018. Top 5 cloud computing predictions for 2020. Retrieved from https://www.techfunnel.com/information-technology/top-5-cloud-computing-predictions-for-2020.
  87. 10.1109/TCC.2015.2440247 · DOI
  88. 10.1109/TIFS.2011.2172209 · DOI
  89. 10.1016/j.cose.2011.05.006 · DOI
  90. 10.1109/TIFS.2016.2523941 · DOI
  91. 10.1109/TC.2015.2401033 · DOI
  92. 10.1007/978-3-642-03356-8_36 · DOI
  93. 10.1007/978-3-642-19379-8_4 · DOI
  94. 10.1016/j.future.2019.03.008 · DOI
  95. 10.1016/j.ins.2018.11.031 · DOI
  96. 10.1109/TIFS.2018.2810065 · DOI
  97. 10.1109/TC.2017.2693265 · DOI
  98. 10.1109/TIFS.2016.2647222 · DOI
  99. 10.1145/2484313.2484383 · DOI
  100. 10.1007/978-3-319-24177-7_8 · DOI
  101. 10.1016/j.pmcj.2015.06.017 · DOI
  102. 10.1109/TCC.2015.2485199 · DOI
  103. 10.1007/s11277-019-06187-3 · DOI
  104. 10.1145/1755688.1755720 · DOI
  105. 10.1145/2414456.2414464 · DOI
  106. 10.1007/s11432-016-9019-8 · DOI
  107. 10.1109/ACCESS.2019.2902040 · DOI
  108. 10.5555/3063155.3063216 · DOI
  109. Yinghui Zhang , Xiaofeng Chen , Jin Li , Hui Li , and Fenghua Li . 2014 . Attribute-based data sharing with flexible and direct revocation in cloud computing . KSII Trans. Internet Inf. Syst. 8 , 11 (2014), 4028 -- 4049 . Yinghui Zhang, Xiaofeng Chen, Jin Li, Hui Li, and Fenghua Li. 2014. Attribute-based data sharing with flexible and direct revocation in cloud computing. KSII Trans. Internet Inf. Syst. 8, 11 (2014), 4028--4049.
  110. 10.1145/2484313.2484381 · DOI
  111. 10.1016/j.ins.2016.04.015 · DOI
  112. 10.1002/sec.1509 · DOI
  113. 10.1007/s00779-017-1047-8 · DOI
  114. 10.1007/s12652-017-0509-1 · DOI
  115. 10.1007/978-3-319-12475-9_18 · DOI
  116. 10.1016/j.pmcj.2015.06.009 · DOI
  117. 10.1109/JIOT.2018.2825289 · DOI
  118. 10.1002/sec.1574 · DOI
  119. 10.1109/TC.2013.200 · DOI

Cited by

Sorted by citations

Metadata

Authors
Zhang, Y., Deng, R. H., Xu, S., Sun, J., Li, Q., & Zheng, D.
Affiliations
  • Xi’an University of Posts and Telecommunications (CN)
  • Singapore Management University (SG)
  • Nanjing University of Posts and Telecommunications (CN)
ORCID
Venue
ACM Computing Surveys
Publisher
Association for Computing Machinery (ACM)
Published
2020-08-03
Volume
53
Issue
4
Pages
1-41
ISSN
  • 0360-0300 (ISSN-L)
  • 1557-7341
DOI
10.1145/3398036
OpenAlex
W3041223433
Cited by
176
References
0
Citations by year
2026: 14 · 2025: 37 · 2024: 34 · 2023: 38 · 2022: 38 · 2021: 15
FWCI
8.94
Type
journal article
Language
en
Open access
closed
Licence
www.acm.org/publications/policies/copyright_policy#Background (vor)
Locations
  • ACM Computing Surveys (publishedVersion)
  • Singapore Management University Institutional Knowledge (InK) (Singapore Management University) (submittedVersion)
Funders
  • Innovation Capability Support Program of Shaanxi (2020KJXX-53)
  • Huawei International Pte Ltd Research Grant
  • Basic Research Program of Qinghai Province (2020-ZJ-701)
  • Key Research and Development Program of Shaanxi (2019KW-053)
  • New Star Team of Xi'an University of Posts and Telecommunications (2016-02)
  • National Key R&D Program of China (2017YFB0802000)
  • National Research Foundation Singapore, under the National Satellite of Excellence in Mobile System Security and Cloud Security (NRF2018NCR-NSOE004-0001)
  • the AXA Research Fund
  • Sichuan Science and Technology Program (2017GZDZX0002)
  • National Natural Science Foundation of China (61772418, 61671377 and 61802303)
Topics
  • Physical Sciences › Computer Science › Computer Networks and Communications › Cryptography and Data Security
  • Physical Sciences › Computer Science › Information Systems › Cloud Data Security Solutions
  • Physical Sciences › Computer Science › Information Systems › Blockchain Technology Applications and Security
Keywords
attribute-based encryption, key-policy attribute-based encryption, ciphertext-policy attribute-based encryption, revocation, policy hiding, multi-authority access control, hierarchical access control, offline computation, outsourced computation, security objectives, adversarial model

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review