Two-factor Data Access Control with Efficient Revocation for Multi-authority Cloud Storage Systems

 Two-factor Data Access Control with Efficient Revocation for Multi-authority Cloud Storage Systems

 Attribute-based encryption, especially for ciphertext-policy attribute-based encryption, can fulfill the functionality of fine-grained access control in cloud storage systems. Since users’ attributes may be issued by multiple attribute authorities, multi-authority ciphertext-policy attributebased encryption is an emerging cryptographic primitive for enforcing attribute-based access control on outsourced data. However, most of the existing multi-authority attribute-based systems are either insecure in attribute-level revocation or lack of efficiency in communication overhead and computation cost.