Implementing An Outsourced Dual-Proxy Signing and Decryption Scheme in Mobile Cloud Computing

Existing access control schemes that support fine-grained and secure data sharing for mobile cloud computing system typically focus on the design and development of secure and lightweight cryptographic protocols to enable data users efficiently decrypt the data by using mobile devices. However, some business requirements such as industrial cloud users may require the proof of authenticity of the data owner. Accordingly, both privacy-preserving and strong authenticity that data users can verify the authenticity of data owners to make trust the shared data are essential. To this end, we proposed a secure and efficient access control featured with efficient revocation in mobile cloud computing environment. Our proposed scheme is based on the outsourced dual proxy model where the expensive digital signing, encryption and decryption are partially offloaded to be executed by the delegated proxies in the cloud. We employed the symmetric encryption and the ciphertext policy attribute-based encryption (CP-ABE) as a core encryption scheme. In addition, we introduced a user revocation algorithm to enable the efficient user revocation in the mobile cloud computing. For the evaluation, we run the experiments to measure the performance of our core access control algorithms and the results demonstrated that our proposed scheme is efficient.