文献类型：期刊文献

英文题名：An Access Control Model Against Attribute Guessing Attacks for Data Sharing in Cloud Computing Environment

作者：Zhang, Qikun[1];Feng, Jinbo[1];Wang, Ruifang[1];Li, Yongjiao[2];Yuan, Junling[1];Tan, Yu-an[3]

机构：[1]Zhengzhou Univ Light Ind, Sch Comp Sci & Technol, Zhengzhou, Peoples R China;[2]East China Univ Sci & Technol, Key Lab Smart Mfg Energy Chem Proc, Minist Educ, Shanghai, Peoples R China;[3]Beijing Inst Technol, Sch Comp Sci & Technol, Beijing, Peoples R China

年份：2025

卷号：37

期号：15-17

外文期刊名：CONCURRENCY AND COMPUTATION-PRACTICE & EXPERIENCE

收录：;EI(收录号：20252418575973);WOS:【SCI-EXPANDED(收录号:WOS:001519774100024)】；

基金：This work was supported by the National Natural Science Foundation of China under Grant (No. 61971380, 61772477), and the Key Technologies R&D Program of Henan Province (No. 252102211089, 252102211112, 242102210135, 242102211098), and the research funding of Key Laboratory of Big Data Intelligent Computing (No. BDIC-2023-B-006).

语种：英文

外文关键词：access control; attribute-based encryption; data sharing; searchable encryption

摘要：Data sharing is a fundamental component that facilitates collaboration and interoperability among entities in cloud computing environments. It enables cross-domain access, concurrent task execution, and parallel multi-task processing. However, challenges such as privacy breaches, vulnerabilities of sensitive data, and inflexible access control mechanisms are prevalent in data access scenarios. Many existing attribute-based searchable encryption (ABSE) schemes suffer from issues like keyword leakage, limited query methods, and susceptibility to attribute guessing attacks. To address these challenges, this paper proposes an attribute-based access control scheme designed to mitigate keyword-guessing attacks in cloud environments. The proposed scheme has several advantages: (1) Enhanced Privacy Protection: By employing attribute-based encryption (ABE), the scheme ensures user personal information and ciphertext attribute values remain protected during authentication through hidden attribute authentication techniques. (2) Resistance to Keyword-Guessing Attacks: The scheme utilizes an anti-guessing attribute encryption algorithm, ensuring that attribute keywords and access policies remain secure against guessing attacks during transmission. (3) A flexible ciphertext attribute search and matching algorithm enhances access control security and supports fine-grained access control. This approach achieves precise, adaptable, and stealthy access control while strengthening privacy protection. It also accommodates diverse search requirements and ensures robust fine-grained access control. Security analysis confirms its strong security. Performance analysis shows that it outperforms existing schemes.