A lightweight mobile-cloud based access control scheme with fully outsourced CP-ABE decryption

Mobile-cloud based access control has become the crucial topic since most mobile applications usually consume services available in cloud environment. Ciphertext policy attribute-based encryption (CP-ABE) is one of the common techniques that has been employed for supporting the secure and fine-grained access control in the mobile cloud computing (MCC). Existing MCC access control solutions using CP-ABE propose attempts to offload a partial or full encryption and/or decryption cost of CP-ABE including pairing and exponentiation cost to execute at the cloud server. However, existing schemes have not entailed the comprehensive solution that takes policy hiding and efficient revocation in their outsourcing models. In this thesis, we proposed a scheme to deliver a secure and efficient mobile-cloud based access control based on the fully outsourced CP-ABE encryption and decryption. In this scheme, we proposed a set of cryptographic algorithms that supports both outsourced encryption with policy hiding and outsourced decryption based on the transformation key computation technique. Furthermore, we proposed a revocation algorithm that supports both user and attribute revocation level. Finally, we conducted performance evaluation to substantiate that our proposed scheme is efficient in practice.