An Efficient Data Sharing System with Enhanced Authentication Factors and Secure Access Privilege Delegation

In an era where digital data is growing and secure access control is critical, the development of dependable and efficient data sharing platforms is imperative. This proposed work introduces a comprehensive solution that not only bolsters user authentication but also facilitates secure access privilege delegation, ensuring data remains confidential and accessible only to authorized parties. It provides the secure data sharing within group and user authentication involves multiple layers of security to guarantee the user's identification and safeguard the integrity and privacy of shared communication data. The system leverages enhanced authentication factors, going beyond traditional username and password combinations. It incorporates a multiple authentication approach, combining traditional password login, Shared secret key verification and biometric verification. The shared data is protecting with the help of data steganography and re-encryption approach. The outsourced data is encrypted using Elliptic Curve Cryptography (ECC) for robust protection and stored on blockchain server. When user want to access shared data, they will send request along with their public key. The shared public key and decryption key was combined and hidden within an image using Least Significant Bit (LSB) based steganography to conceal it from view. The steganography-embedded image is re-encrypted for adding an extra layer of security. The re-encrypted image and decryption key are shared with the recipient, who needs both components to access the original data. Data security and confidentiality are guaranteed by this procedure. Through the shared public key verification mechanism, the deciphered key can be uprooted by an authorized customer. When user records do not match encapsulated information, it can be used to find illegitimate or illicit access. In a cloud context, this suggested application helps with the identification of unauthorized access and the prohibition of content redistribution.