{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,8]],"date-time":"2026-02-08T07:41:49Z","timestamp":1770536509807,"version":"3.49.0"},"reference-count":47,"publisher":"Oxford University Press (OUP)","issue":"6","license":[{"start":{"date-parts":[[2022,3,29]],"date-time":"2022-03-29T00:00:00Z","timestamp":1648512000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/academic.oup.com\/journals\/pages\/open_access\/funder_policies\/chorus\/standard_publication_model"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U1936209"],"award-info":[{"award-number":["U1936209"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62002353"],"award-info":[{"award-number":["62002353"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100002858","name":"China Postdoctoral Science Foundation","doi-asserted-by":"publisher","award":["2021M701726"],"award-info":[{"award-number":["2021M701726"]}],"id":[{"id":"10.13039\/501100002858","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Yunnan Provincial Major Science and Technology Special Plan Projects","award":["202103AA080015"],"award-info":[{"award-number":["202103AA080015"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023,6,19]]},"abstract":"<jats:title>Abstract<\/jats:title>\n               <jats:p>As a promising service paradigm, cloud computing has attracted lots of enterprises and individuals to outsource big data to public cloud. To facilitate secure data using and sharing, ciphertext-policy attribute-based encryption (CP-ABE) is a suitable solution, which can provide fine-grained access control and encryption functionalities simultaneously. However, some serious challenges are still remaining toward achieving flexible and controllable access policy update in CP-ABE, which essentially impede the powerful access control ability of CP-ABE from long-term and large-scale deployment in real systems. In this work, we propose a novel scheme named policy updatable CP-ABE for encrypted data sharing scenes. The proposed scheme features the following achievements: (i) it supports fine-grained update algorithms with no restriction on update time; (ii) the cloud server can effectively verify update ciphertexts, so the integrity of original data would not be compromised intentionally or accidentally during the update and (iii) most operations of encryption and policy update are securely outsourced to cloud servers, leaving extremely low overheads for data owners and users. We formally define its security model and prove it is adaptively secure. Also, we implement the proposed scheme using the Charm framework. The experiment results demonstrate that it is efficient and practical.<\/jats:p>","DOI":"10.1093\/comjnl\/bxac024","type":"journal-article","created":{"date-parts":[[2022,2,21]],"date-time":"2022-02-21T12:07:53Z","timestamp":1645445273000},"page":"1507-1524","source":"Crossref","is-referenced-by-count":4,"title":["Flexible and Controllable Access Policy Update for Encrypted Data Sharing in the Cloud"],"prefix":"10.1093","volume":"66","author":[{"given":"Ti","family":"Wang","sequence":"first","affiliation":[{"name":"Institute of Information Engineering , Chinese Academy of Sciences, Beijing 100093, China"},{"name":"School of Cyber Security , University of Chinese Academy of Sciences, Beijing 100049, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yongbin","family":"Zhou","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering , Chinese Academy of Sciences, Beijing 100093, China"},{"name":"School of Cyber Security , University of Chinese Academy of Sciences, Beijing 100049, China"},{"name":"School of Cyber Science and Engineering , Nanjing University of Science and Technology, Nanjing 210094, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hui","family":"Ma","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering , Chinese Academy of Sciences, Beijing 100093, China"},{"name":"School of Cyber Security , University of Chinese Academy of Sciences, Beijing 100049, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Rui","family":"Zhang","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering , Chinese Academy of Sciences, Beijing 100093, China"},{"name":"School of Cyber Security , University of Chinese Academy of Sciences, Beijing 100049, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"286","published-online":{"date-parts":[[2022,3,29]]},"reference":[{"key":"2023062010042068600_ref1","doi-asserted-by":"crossref","first-page":"321","DOI":"10.1109\/SP.2007.11","article-title":"Ciphertext-policy attribute-based encryption","volume-title":"2007 IEEE Symposium on Security and Privacy \u2013 S&P\u201907","author":"Bethencourt","year":"2007"},{"key":"2023062010042068600_ref2","first-page":"456","article-title":"Provably secure ciphertext policy ABE","volume-title":"2007 ACM Conf. on Computer and Communications Security \u2013 CCS\u201907","author":"Cheung","year":"2007"},{"key":"2023062010042068600_ref3","first-page":"277","article-title":"Securing \u201cencryption + proof of knowledge\u201d in the random oracle model","volume-title":"The Cryptographer\u2019s Track at the RSA Conf. 2002 \u2013 CT-RSA\u201902","author":"Abe","year":"2002"},{"key":"2023062010042068600_ref4","article-title":"Outsourcing the decryption of ABE ciphertexts","volume-title":"20th USENIX Security Symposium \u2013 USENIX\u201911","author":"Green","year":"2011"},{"key":"2023062010042068600_ref5","doi-asserted-by":"crossref","first-page":"679","DOI":"10.1109\/TDSC.2015.2499755","article-title":"Verifiable and exculpable outsourced attribute-based encryption for access control in cloud computing","volume":"14","author":"Ma","year":"2017","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"2023062010042068600_ref6","doi-asserted-by":"crossref","first-page":"111","DOI":"10.1007\/s13389-013-0057-3","article-title":"Charm: A framework for rapidly prototyping cryptosystems","volume":"3","author":"Akinyele","year":"2013","journal-title":"J. Cryptogr. Eng."},{"key":"2023062010042068600_ref7","first-page":"457","article-title":"Fuzzy identity-based encryption","volume-title":"24th Annual Int. Conf. on the Theory and Applications of Cryptographic Techniques \u2013 EUROCRYPT\u201905","author":"Sahai","year":"2005"},{"key":"2023062010042068600_ref8","first-page":"89","article-title":"Attribute-based encryption for fine-grained access control of encrypted data","volume-title":"13th ACM Conf. on Computer and Communications Security \u2013 CCS\u201906","author":"Goyal","year":"2006"},{"key":"2023062010042068600_ref9","first-page":"276","article-title":"Attribute based proxy re-encryption with delegating capabilities","volume-title":"2009 ACM Symposium on Information, Computer and Communications Security \u2013 ASIACCS\u201909","author":"Liang","year":"2009"},{"key":"2023062010042068600_ref10","first-page":"2677","article-title":"Fine-grained data sharing in cloud computing for mobile devices","volume-title":"2015 IEEE Conf. on Computer Communications \u2013 INFOCOM\u201915","author":"Shao","year":"2015"},{"key":"2023062010042068600_ref11","first-page":"463","article-title":"Practical constructions and new proof methods for large universe attribute-based encryption","volume-title":"2013 ACM SIGSAC Conf. on Computer and Communications Security \u2013 CCS\u201913","author":"Rouselakis","year":"2013"},{"key":"2023062010042068600_ref12","doi-asserted-by":"crossref","first-page":"1026","DOI":"10.1109\/TDSC.2018.2844814","article-title":"Efficient fine-grained data sharing mechanism for electronic medical record systems with mobile devices","volume":"17","author":"Ma","year":"2020","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"2023062010042068600_ref13","doi-asserted-by":"crossref","first-page":"401","DOI":"10.1007\/978-3-642-17650-0_28","article-title":"Ciphertext policy attribute-based proxy re-encryption","volume-title":"12th Int. Conf. on Information and Communications Security \u2013 ICICS\u201910","author":"Luo","year":"2010"},{"key":"2023062010042068600_ref14","doi-asserted-by":"crossref","first-page":"2397","DOI":"10.1002\/sec.1509","article-title":"Anonymous attribute-based proxy re-encryption for access control in cloud computing","volume":"9","author":"Zhang","year":"2016","journal-title":"Secur. Commun. Networks"},{"key":"2023062010042068600_ref15","doi-asserted-by":"crossref","first-page":"533","DOI":"10.1007\/s10207-017-0388-7","article-title":"Ciphertext-policy attribute-based encryption supporting access policy update and its extension with preserved attributes","volume":"17","author":"Jiang","year":"2018","journal-title":"Int. J. Inf. Sec."},{"key":"2023062010042068600_ref16","doi-asserted-by":"crossref","first-page":"95","DOI":"10.1016\/j.future.2014.11.016","article-title":"A secure and efficient ciphertext-policy attribute-based proxy re-encryption for cloud data sharing","volume":"52","author":"Liang","year":"2015","journal-title":"Future Gener. Comput. Syst."},{"key":"2023062010042068600_ref17","first-page":"192","article-title":"Fully secure hidden ciphertext-policy attribute-based proxy re-encryption","volume-title":"19th Int. Conf. on Information and Communications Security \u2013 ICICS\u201917","author":"Feng","year":"2017"},{"key":"2023062010042068600_ref18","doi-asserted-by":"crossref","first-page":"172","DOI":"10.1109\/TCC.2013.11","article-title":"Hybrid attribute- and re-encryption-based key management for secure and scalable mobile applications in clouds","volume":"1","author":"Tysowski","year":"2013","journal-title":"IEEE Trans. Cloud Comput."},{"key":"2023062010042068600_ref19","doi-asserted-by":"crossref","first-page":"785","DOI":"10.1109\/TSC.2016.2520932","article-title":"Flexible and fine-grained attribute-based data storage in cloud computing","volume":"10","author":"Li","year":"2017","journal-title":"IEEE Trans. Serv. Comput."},{"key":"2023062010042068600_ref20","first-page":"261","article-title":"Attribute based data sharing with attribute revocation","volume-title":"2010 ACM Symposium on Information, Computer and Communications Security \u2013 ASIACCS\u201910","author":"Yu","year":"2010"},{"key":"2023062010042068600_ref21","doi-asserted-by":"crossref","first-page":"1767","DOI":"10.1109\/JSYST.2017.2667679","article-title":"User collusion avoidance CP-ABE with efficient attribute revocation for cloud storage","volume":"12","author":"Li","year":"2018","journal-title":"IEEE Syst. J."},{"key":"2023062010042068600_ref22","doi-asserted-by":"crossref","first-page":"76","DOI":"10.1109\/TIFS.2012.2223683","article-title":"White-box traceable ciphertext-policy attribute-based encryption supporting any monotone access structures","volume":"8","author":"Liu","year":"2013","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"2023062010042068600_ref23","article-title":"Attribute based encryption with privacy protection and accountability for cloudiot","volume":"1","author":"Li","year":"2020","journal-title":"IEEE Trans. Cloud Comput."},{"key":"2023062010042068600_ref24","first-page":"199","article-title":"Adaptable ciphertext-policy attribute-based encryption","volume-title":"6th Int. Conf. on Pairing-Based Cryptography \u2013 Pairing\u201913","author":"Lai","year":"2013"},{"key":"2023062010042068600_ref25","doi-asserted-by":"crossref","first-page":"6191","DOI":"10.1007\/s00500-016-2177-z","article-title":"Adaptable key-policy attribute-based encryption with time interval","volume":"21","author":"Ma","year":"2017","journal-title":"Soft Comput."},{"key":"2023062010042068600_ref26","first-page":"301","article-title":"Outsourcing the re-encryption key generation: Flexible ciphertext-policy attribute-based proxy re-encryption","volume-title":"11th Int. Conf. on Information Security Practice and Experience \u2013 ISPEC\u201915","author":"Kawai","year":"2015"},{"key":"2023062010042068600_ref27","doi-asserted-by":"crossref","first-page":"3461","DOI":"10.1109\/TPDS.2014.2380373","article-title":"Secure and verifiable policy update outsourcing for big data access control in the cloud","volume":"26","author":"Yang","year":"2015","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"key":"2023062010042068600_ref28","first-page":"568","article-title":"Decentralizing attribute-based encryption","volume-title":"30th Annual Int. Conf. on the Theory and Applications of Cryptographic Techniques \u2013 EUROCRYPT\u201911","author":"Lewko","year":"2011"},{"key":"2023062010042068600_ref29","doi-asserted-by":"crossref","first-page":"112","DOI":"10.1016\/j.jnca.2018.01.016","article-title":"Practical attribute-based encryption: Outsourcing decryption, attribute revocation and policy updating","volume":"108","author":"Liu","year":"2018","journal-title":"J. Netw. Comput. Appl."},{"key":"2023062010042068600_ref30","doi-asserted-by":"crossref","first-page":"315","DOI":"10.1007\/978-3-662-47854-7_19","article-title":"Efficient statically-secure large-universe multi-authority attribute-based encryption","volume-title":"19th Int. Conf. on Financial Cryptography and Data Security \u2013 FC\u201915","author":"Rouselakis","year":"2015"},{"key":"2023062010042068600_ref31","doi-asserted-by":"crossref","first-page":"3110","DOI":"10.1109\/TIFS.2017.2737960","article-title":"EACSIP: Extendable access control system with integrity protection for enhancing collaboration in the cloud","volume":"12","author":"Susilo","year":"2017","journal-title":"IEEE Trans. Inf. Forensics Security"},{"key":"2023062010042068600_ref32","first-page":"53","article-title":"Ciphertext-policy attribute-based encryption: An expressive, efficient, and provably secure realization","volume-title":"14th Int. Conf. on Practice and Theory in Public Key Cryptography \u2013 PKC\u201911","author":"Waters","year":"2011"},{"key":"2023062010042068600_ref33","doi-asserted-by":"crossref","first-page":"1265","DOI":"10.1109\/TIFS.2016.2523941","article-title":"An efficient file hierarchy attribute-based encryption scheme in cloud computing","volume":"11","author":"Wang","year":"2016","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"2023062010042068600_ref34","doi-asserted-by":"crossref","first-page":"983","DOI":"10.1109\/TETC.2019.2904637","article-title":"Extended file hierarchy access control scheme with attribute-based encryption in cloud computing","volume":"9","author":"Li","year":"2021","journal-title":"IEEE Trans. Emerg. Top. Comput."},{"key":"2023062010042068600_ref35","doi-asserted-by":"crossref","first-page":"36218","DOI":"10.1109\/ACCESS.2019.2905346","article-title":"A practical attribute-based document collection hierarchical encryption scheme in cloud computing","volume":"7","author":"Fu","year":"2019","journal-title":"IEEE Access"},{"key":"2023062010042068600_ref36","doi-asserted-by":"crossref","first-page":"175","DOI":"10.1109\/TC.2020.3043950","article-title":"Efficient CP-ABE scheme with shared decryption in cloud storage","volume":"71","author":"Chen","year":"2022","journal-title":"IEEE Trans. Computers"},{"key":"2023062010042068600_ref37","volume-title":"Secure schemes for secret sharing and key distribution","author":"Beimel","year":"1996"},{"key":"2023062010042068600_ref38","first-page":"102","article-title":"On span programs","volume-title":"Eigth Annual Structure in Complexity Theory Conf. \u2013 SCT\u201993","author":"Karchmer","year":"1993"},{"key":"2023062010042068600_ref39","first-page":"665","article-title":"FAME: fast attribute-based message encryption","volume-title":"2017 ACM SIGSAC Conf. on Computer and Communications Security \u2013 CCS\u201917","author":"Agrawal","year":"2017"},{"key":"2023062010042068600_ref40","first-page":"359","article-title":"On probabilistic versus deterministic provers in the definition of proofs of knowledge","volume":"2006","author":"Bellare","year":"2006","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"2023062010042068600_ref41","doi-asserted-by":"crossref","first-page":"161","DOI":"10.1007\/BF00196725","article-title":"Efficient signature generation by smart cards","volume":"4","author":"Schnorr","year":"1991","journal-title":"J. Cryptol."},{"key":"2023062010042068600_ref42","first-page":"186","article-title":"How to prove yourself: Practical solutions to identification and signature problems","volume-title":"Advances in Cryptology \u2013 CRYPTO\u201986","author":"Fiat","year":"1986"},{"key":"2023062010042068600_ref43","first-page":"112","article-title":"A proposal for an ISO standard for public key encryption","volume":"2001","author":"Shoup","year":"2001","journal-title":"IACR Cryptology ePrint Archive"},{"key":"2023062010042068600_ref44","first-page":"296","article-title":"Message-locked encryption and secure deduplication","volume-title":"32nd Annual Int. Conf. on the Theory and Applications of Cryptographic Techniques \u2013 EUROCRYPT\u2019 13","author":"Bellare","year":"2013"},{"key":"2023062010042068600_ref45","first-page":"83","article-title":"Fully secure ABE with outsourced decryption against chosen ciphertext attack","volume-title":"16th Int. Conf. on Information Security and Cryptology \u2013 Inscrypt\u201920","author":"Wang","year":"2020"},{"key":"2023062010042068600_ref46","doi-asserted-by":"crossref","first-page":"80","DOI":"10.1007\/s00145-011-9114-1","article-title":"Secure integration of asymmetric and symmetric encryption schemes","volume":"26","author":"Fujisaki","year":"2013","journal-title":"J. Cryptol."},{"key":"2023062010042068600_ref47","first-page":"71","article-title":"Generic constructions for chosen-ciphertext secure attribute based encryption","volume-title":"14th Int. Conf. on Practice and Theory in Public Key Cryptography \u2013 PKC\u201911","author":"Yamada","year":"2011"}],"container-title":["The Computer Journal"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/academic.oup.com\/comjnl\/article-pdf\/66\/6\/1507\/50643512\/bxac024.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/academic.oup.com\/comjnl\/article-pdf\/66\/6\/1507\/50643512\/bxac024.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,6,20]],"date-time":"2023-06-20T10:05:11Z","timestamp":1687255511000},"score":1,"resource":{"primary":{"URL":"https:\/\/academic.oup.com\/comjnl\/article\/66\/6\/1507\/6555409"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,3,29]]},"references-count":47,"journal-issue":{"issue":"6","published-online":{"date-parts":[[2022,3,29]]},"published-print":{"date-parts":[[2023,6,19]]}},"URL":"https:\/\/doi.org\/10.1093\/comjnl\/bxac024","relation":{},"ISSN":["0010-4620","1460-2067"],"issn-type":[{"value":"0010-4620","type":"print"},{"value":"1460-2067","type":"electronic"}],"subject":[],"published-other":{"date-parts":[[2023,6]]},"published":{"date-parts":[[2022,3,29]]}}}