An approach of implementing core role based access control model using attribute based encryption

Yong Wang; Xuemin Tong; Ming Li; Jingfeng Xue; Ji Zhang; Zhenyan Liu; Dan Hao; Ning Wang

doi:10.1007/978-981-10-7080-8_27

An approach of implementing core role based access control model using attribute based encryption

Yong Wang^*, Xuemin Tong, Ming Li, Jingfeng Xue, Ji Zhang, Zhenyan Liu, Dan Hao, Ning Wang

^*Corresponding author for this work

School of Computer Science and Technology

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

Cloud Storage, which provides cost-efficient and scalable storage services, has emerged as a hot paradigm today. However, in the resource outsourcing environment such as cloud storage, the resource owner is separated from the resource superintendent, and the authorization decision is made by the untrusted outsourcing server, as a result of which the correct enforcement of the access control policies cannot be ensured. To keep the data confidential against unauthorized parties, cryptographic access control must be applied. In this paper, we present a new cryptographic approach of implementing Core Role based Access Control Model named ABE-RBAC. We use Attribute Based Encryption (ABE) to manage users, roles, permissions, as well as user role assignments (URA) and role permission assignments (RPA), which enables the resource owner to fully control the authorization management, and ensures the proper enforcement of access control polices. This is the first cryptographic core RBAC enforcement that completely conform to the standard GB/T 25062-2010.

Original language	English
Title of host publication	Trusted Computing and Information Security - 11th Chinese Conference, CTCIS 2017, Proceedings
Editors	Fei Yan, Ming Xu, Shaojing Fu, Zheng Qin
Publisher	Springer Verlag
Pages	397-408
Number of pages	12
ISBN (Print)	9789811070792
DOIs	https://doi.org/10.1007/978-981-10-7080-8_27
Publication status	Published - 2017
Event	11th Chinese Conference on Trusted Computing and Information Security, CTCIS 2017 - Changsha, China Duration: 14 Sept 2017 → 17 Sept 2017

Publication series

Name	Communications in Computer and Information Science
Volume	704
ISSN (Print)	1865-0929

Conference

Conference	11th Chinese Conference on Trusted Computing and Information Security, CTCIS 2017
Country/Territory	China
City	Changsha
Period	14/09/17 → 17/09/17

Keywords

ABE
Cloud storage
Cryptographic access control
GB/T 25062-2010
RBAC

Access to Document

10.1007/978-981-10-7080-8_27

Cite this

Wang, Y., Tong, X., Li, M., Xue, J., Zhang, J., Liu, Z., Hao, D., & Wang, N. (2017). An approach of implementing core role based access control model using attribute based encryption. In F. Yan, M. Xu, S. Fu, & Z. Qin (Eds.), Trusted Computing and Information Security - 11th Chinese Conference, CTCIS 2017, Proceedings (pp. 397-408). (Communications in Computer and Information Science; Vol. 704). Springer Verlag. https://doi.org/10.1007/978-981-10-7080-8_27

Wang, Yong ; Tong, Xuemin ; Li, Ming et al. / An approach of implementing core role based access control model using attribute based encryption. Trusted Computing and Information Security - 11th Chinese Conference, CTCIS 2017, Proceedings. editor / Fei Yan ; Ming Xu ; Shaojing Fu ; Zheng Qin. Springer Verlag, 2017. pp. 397-408 (Communications in Computer and Information Science).

@inproceedings{ee2542961b7c4ee8892048cfbf3dd96b,

title = "An approach of implementing core role based access control model using attribute based encryption",

abstract = "Cloud Storage, which provides cost-efficient and scalable storage services, has emerged as a hot paradigm today. However, in the resource outsourcing environment such as cloud storage, the resource owner is separated from the resource superintendent, and the authorization decision is made by the untrusted outsourcing server, as a result of which the correct enforcement of the access control policies cannot be ensured. To keep the data confidential against unauthorized parties, cryptographic access control must be applied. In this paper, we present a new cryptographic approach of implementing Core Role based Access Control Model named ABE-RBAC. We use Attribute Based Encryption (ABE) to manage users, roles, permissions, as well as user role assignments (URA) and role permission assignments (RPA), which enables the resource owner to fully control the authorization management, and ensures the proper enforcement of access control polices. This is the first cryptographic core RBAC enforcement that completely conform to the standard GB/T 25062-2010.",

keywords = "ABE, Cloud storage, Cryptographic access control, GB/T 25062-2010, RBAC",

author = "Yong Wang and Xuemin Tong and Ming Li and Jingfeng Xue and Ji Zhang and Zhenyan Liu and Dan Hao and Ning Wang",

note = "Publisher Copyright: {\textcopyright} Springer Nature Singapore Pte Ltd. 2017.; 11th Chinese Conference on Trusted Computing and Information Security, CTCIS 2017 ; Conference date: 14-09-2017 Through 17-09-2017",

year = "2017",

doi = "10.1007/978-981-10-7080-8_27",

language = "English",

isbn = "9789811070792",

series = "Communications in Computer and Information Science",

publisher = "Springer Verlag",

pages = "397--408",

editor = "Fei Yan and Ming Xu and Shaojing Fu and Zheng Qin",

booktitle = "Trusted Computing and Information Security - 11th Chinese Conference, CTCIS 2017, Proceedings",

address = "Germany",

}

Wang, Y, Tong, X, Li, M, Xue, J , Zhang, J , Liu, Z, Hao, D & Wang, N 2017, An approach of implementing core role based access control model using attribute based encryption. in F Yan, M Xu, S Fu & Z Qin (eds), Trusted Computing and Information Security - 11th Chinese Conference, CTCIS 2017, Proceedings. Communications in Computer and Information Science, vol. 704, Springer Verlag, pp. 397-408, 11th Chinese Conference on Trusted Computing and Information Security, CTCIS 2017, Changsha, China, 14/09/17. https://doi.org/10.1007/978-981-10-7080-8_27

An approach of implementing core role based access control model using attribute based encryption. / Wang, Yong; Tong, Xuemin; Li, Ming et al.
Trusted Computing and Information Security - 11th Chinese Conference, CTCIS 2017, Proceedings. ed. / Fei Yan; Ming Xu; Shaojing Fu; Zheng Qin. Springer Verlag, 2017. p. 397-408 (Communications in Computer and Information Science; Vol. 704).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - An approach of implementing core role based access control model using attribute based encryption

AU - Wang, Yong

AU - Tong, Xuemin

AU - Li, Ming

AU - Xue, Jingfeng

AU - Zhang, Ji

AU - Liu, Zhenyan

AU - Hao, Dan

AU - Wang, Ning

N1 - Publisher Copyright: © Springer Nature Singapore Pte Ltd. 2017.

PY - 2017

Y1 - 2017

N2 - Cloud Storage, which provides cost-efficient and scalable storage services, has emerged as a hot paradigm today. However, in the resource outsourcing environment such as cloud storage, the resource owner is separated from the resource superintendent, and the authorization decision is made by the untrusted outsourcing server, as a result of which the correct enforcement of the access control policies cannot be ensured. To keep the data confidential against unauthorized parties, cryptographic access control must be applied. In this paper, we present a new cryptographic approach of implementing Core Role based Access Control Model named ABE-RBAC. We use Attribute Based Encryption (ABE) to manage users, roles, permissions, as well as user role assignments (URA) and role permission assignments (RPA), which enables the resource owner to fully control the authorization management, and ensures the proper enforcement of access control polices. This is the first cryptographic core RBAC enforcement that completely conform to the standard GB/T 25062-2010.

AB - Cloud Storage, which provides cost-efficient and scalable storage services, has emerged as a hot paradigm today. However, in the resource outsourcing environment such as cloud storage, the resource owner is separated from the resource superintendent, and the authorization decision is made by the untrusted outsourcing server, as a result of which the correct enforcement of the access control policies cannot be ensured. To keep the data confidential against unauthorized parties, cryptographic access control must be applied. In this paper, we present a new cryptographic approach of implementing Core Role based Access Control Model named ABE-RBAC. We use Attribute Based Encryption (ABE) to manage users, roles, permissions, as well as user role assignments (URA) and role permission assignments (RPA), which enables the resource owner to fully control the authorization management, and ensures the proper enforcement of access control polices. This is the first cryptographic core RBAC enforcement that completely conform to the standard GB/T 25062-2010.

KW - ABE

KW - Cloud storage

KW - Cryptographic access control

KW - GB/T 25062-2010

KW - RBAC

UR - http://www.scopus.com/inward/record.url?scp=85036462461&partnerID=8YFLogxK

U2 - 10.1007/978-981-10-7080-8_27

DO - 10.1007/978-981-10-7080-8_27

M3 - Conference contribution

AN - SCOPUS:85036462461

SN - 9789811070792

T3 - Communications in Computer and Information Science

SP - 397

EP - 408

BT - Trusted Computing and Information Security - 11th Chinese Conference, CTCIS 2017, Proceedings

A2 - Yan, Fei

A2 - Xu, Ming

A2 - Fu, Shaojing

A2 - Qin, Zheng

PB - Springer Verlag

T2 - 11th Chinese Conference on Trusted Computing and Information Security, CTCIS 2017

Y2 - 14 September 2017 through 17 September 2017

ER -

Wang Y, Tong X, Li M, Xue J , Zhang J , Liu Z et al. An approach of implementing core role based access control model using attribute based encryption. In Yan F, Xu M, Fu S, Qin Z, editors, Trusted Computing and Information Security - 11th Chinese Conference, CTCIS 2017, Proceedings. Springer Verlag. 2017. p. 397-408. (Communications in Computer and Information Science). doi: 10.1007/978-981-10-7080-8_27

An approach of implementing core role based access control model using attribute based encryption

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this