A SURVEY OF DECENTRALIZED ACCESS CONTROL IN SECURE CLOUD STORAGE

IJSRD - International Journal for Scientific Research & Development| Vol. 3, Issue 08, 2015 | ISSN (online): 2321-0613

A Survey of Decentralized Access Control in Secure Cloud Storage S.Priyanga1 S.Periyasamy2 1 M.Tech Student 2Associate Professor 1,2 Department of Information Technology 1,2 K.S.R College of Engineering, Tiruchengode, TamilNadu,India Abstract— In cloud, Decentralized access control scheme are used for secure data storage that supports anonymous authentication. It has the added feature, only authenticated user can able to decrypt the stored information in cloud.it prevents replay attacks and supports creation, modification, and reading data stored in the cloud. Using an address user revocation technics if the user have a matching set of attributes means they can able to access the data. The revoked users cannot access the data after they can be revoked. The decentralized access scheme is used in cloud storage to make the data secure and the technics used to secure the data in cloud are surveyed in this paper.

Key words: Access Control, Attribute Based Signature, Secure Provenance, And Identify Based Encryption I. INTRODUCTION

based encryption is used to encrypt the PHR data and the patients can allow access not only by personal users, but also by various users from different public domains. An important future work will be enhancing the MA-ABE scheme to support more expressive owner-defined access policies.

B. Identity-Based Cryptography for Cloud Security In this paper, Identity based signature are proposed in hierarchical cloud computing in that identity based encryption are presented. APCC is constructed based on the IBS and IBE. The authentication protocol is more lightweight comparing to SSL authentication protocol. The lightweight achieved on the user side is significant. The great scalability is a merit of the model and needs well with the massive cloud.

Cloud Computing is a ubiquitous, convenient and on demand access to share a configurable resource. Cloud computing is a large group of interconnected computer. It may public. Cloud allows to store and process their data in third party data centres. In cloud the stored data can able to access multiple distributed environments.

In cloud computing the stored data are highly sensitive manner, for ex: medical records. Distributed access control are presented in cloud for storing data. So that, only authorized user can view the records of the patient collected by the hospital management. Valid users only can modify the data and store the data. The cloud is centralized in nature and using ABE scheme. Decentralized approach using symmetric key approach and it is not support authentication.

The decentralized policy is a distributed way.

Access control is used only authorized user access the valid service. Using an access control policy user with set of attributes and fulfils the access policy and access the data. By using this control only selected files can able to be accessed. The decentralized approach using many key distribution centre in various locations. The user can only store a file other users can only read the data, write access is not permitted.

Attribute based encryption techniques using if the user have a matching attributes means, they can decrypt the stored information. This encryption techniques are used in decentralized cloud for removing the computational burden of revocation event from the CSP.

C. Secure Provenance: The Essential of Bread and Butter of Data Forensics in Cloud Computing In this paper, secure provenance is play the role of that records ownership and process history of data object is to the success of the data forensics in cloud computing but it is challenging today. To tackle the unexplored area in cloud computing. The bilinear techniques are proposed. The scheme providing the confidentiality on sensitive documents stored in the cloud and also supports anonymous authentication on user access, provenance tracking on disputed documents pushes the cloud computing for wide acceptance in public. The provable security techniques, demonstrate the proposed scheme is secure in the standard model.

II. LITERATURE SURVEY

E. Attribute Based Data Sharing with Attribute Revocation.

The proxy re-encryption technics enables giving the authority to revoke the user attributes with a minimal effort.

Integrating this technic of re-encryption with CP-ABE, the authority to delegates the tasks to proxy server. The scheme is provably secure against cipher text attacks. To solve the issue of attribute revocation for using attribute based systems. The scheme process a minimal load of authority .the KP-ABE used user secret keys are defined with access structure. The scenarios in which semi-trustable online

A. Securing Personal Health Records in Cloud Computing: Patient-Centric and Fine-Grained Data Access Control in Multi-owner Settings In this paper, a novel framework of access control to realize the privacy for PHR in cloud computing. The patients have full control their privacy through the encrypting PHR files.

By multiple PHR owners and users, the complexity of key Management is reduced when the number of owners and users in the system is large. The multi-authority attribute-

D. Towards Secure and Dependable Storage Services in Cloud Computing Cloud storage enables users to achieve on demand high quality cloud applications eliminate the burden of local hardware .to achieve the flexible cloud storage service flexible distributed storage integrity auditing mechanism using holomorphic token is used. Effective distributed scheme allows users to audit the cloud storage with very light weight communication. The auditing results ensure the cloud storage correctness and detect the misbehaving server.

The design supports the secure dynamic operation on cloud data, including modify, delete, and append. To analyse paper the scheme is highly efficient and resilient against byzantine failure and colluding attacks.

All rights reserved by www.ijsrd.com

407

A Survey of Decentralized Access Control in Secure Cloud Storage (IJSRD/Vol. 3/Issue 08/2015/101)

proxy servers are available. Comparing a secure computation technics with proposed scheme giving guarantee to the honesty of proxy servers and also allow to update the user secret key without disclosing the attribute information.

F. Attribute Based Encryption with Privacy Preserving using Asymmetric Key in Cloud Computing In this paper, using the SHA algorithm to hide the user attributes. The centralized approach, a single key distribution centre distributes secret keys and attributes to all users. The probabilistic asymmetric algorithm for public key cryptography in pailer cryptosystems. The decentralized access control scheme used secure data storage in cloud and supports having known name or identity or known resource.

Pailer algorithm use for creation of access policy, file accessing and file restoring process and using query based algorithm hiding the access policy of the user.to prevent the replay attacks. Using the file recovery technique to recover the corrupted file.

III. CONCLUSION The survey paper attempts to study and provide a brief knowledge about the different cloud computing concepts and technics. Most common cloud computing approaches can be as identity based encryption, multi authority attribute based encryption, secure provenance are surveyed in this paper. There are various methods are used the decentralized method is providing security in the data stored in cloud. The scheme uses a symmetric key approach and does not support authentication.

REFERENCES [1] H. Li, Y. Dai, L. Tian, and H. Yang, “Identity-Based Authentication for Cloud Computing,” Proc. First Int’l Conf. Cloud Computing (CloudCom), pp. 157-166, 2009.

[2] M. Li, S. YU, K. Ren, and Lou, “Securing personal health records in cloud computing: patient-centric and fine grained data access control in multi-owner settings,” Proc. Sixth Int’l ICST conf. Security and privacy in comm. (Networksecurecomm), pp.89106,2010.

[3] R. Lu, X. Lin, X. Liang, and X.Shen, “Secure Provenance: The Essential of Bread and Butter of Data Forensics in Cloud Computing,” Proc. Fifth ACM Symp.

Information, Computer and Comm.

Security(ASIACCS), pp.282-292, 2010 [4] S. Yu, C. Wang, K. Ren, and W. Lou, “Attribute based data sharing with attribute revocation,” Proc. ACM Symp.Information, Computer and Comm. Security (ASIACCS), pp. 261-270, 2010.

[5] C. Wang, Q. Wang, K. Ren, N. Cao, and W. Lou, “Toward secure and dependable storage services in cloud computing,” IEEE Trans. Services Computing, vol. 5,no. 2,pp. 220-232, Apr-June 2012.

[6] S. Ruj, M. Stojmenovic, and A. Nayak, “Privacy Preserving AccessControl with Authentication for Securing Data in Clouds,” Proc.IEEE/ACM Int’l Symp.Cluster, Cloud and Grid Computing, pp. 556563, 2012.

All rights reserved by www.ijsrd.com

408