Fuzzy Authorization for Cloud Storage

Provided by: Institute of Electrical & Electronic Engineers
Topic: Data Management
Format: PDF
By leveraging and modifying Ciphertext-Policy Attribute Based Encryption (CP-ABE) and OAuth, the authors propose a new authorization scheme, called fuzzy authorization, to facilitate an application registered with one cloud party to access data residing in another cloud party. The new proposed scheme enables the fuzziness of authorization to enhance the scalability and flexibility of file sharing by taking advantage of the one-to-one correspondence between Linear Secret-Sharing Scheme (LSSS) and Generalized Reed Solomon (GRS) code. Furthermore, by conducting attribute distance checking and distance adjustment, operations like sending attribute sets and satisfying an access tree are eliminated.

Find By Topic