• Dr. P. K. Venkateswar Lal
• B.Adithya siva sai

Secure cloud storage, which is an emerging cloud service, is designed to protect the confidentiality of outsourced data but also to provide flexible data access for cloud users whose data is out of physical control. Ciphertext-Policy Attribute-Based Encryption (CP-ABE) is regarded as one of the most promising techniques that may be leveraged to secure the guarantee of the service. However, the use of CP-ABE may yield an inevitable security breach which is known as the misuse of access credential (i.e. decryption rights), due to the intrinsic “all-or-nothing” decryption feature of CP-ABE. In this paper, we investigate the two main cases of access credential misuse: one is on the semi-trusted authority side, and the other is on the side of cloud user. To mitigate the misuse, we propose the first accountable authority and revocable CP-ABE based cloud storage system with white-box traceability and auditing, referred to as CryptCloud+. We also present the security analysis and further demonstrate the utility of our system via experiments. In the rapidly evolving domain of cloud storage, ensuring data security and flexible access control is paramount. CryptCloud+ presents a novel approach to secure and expressive data access control tailored for cloud environments. This system leverages advanced cryptographic techniques to provide robust security guarantees while maintaining efficient and flexible access policies. CryptCloud+ integrates attribute-based encryption (ABE) with a hierarchical access control model, enabling fine-grained access permissions based on user attributes and organizational roles. The solution ensures that sensitive data is encrypted end-to-end, mitigating risks associated with unauthorized access and data breaches. Performance evaluations demonstrate that CryptCloud+ achieves a balance between security and efficiency, making it a practical solution for real-world cloud storage systems. By combining strong security mechanisms with expressive access control policies, CryptCloud+ addresses critical challenges in cloud data management, offering a secure and adaptable framework for organizations leveraging cloud technologies.

Secure Cloud Storage, Ciphertext-Policy Attribute-Based Encryption, Access Credentials Misuse, Traceability and Revocation, Auditing

"CryptCloud+: Secure and Expressive DataAccess Control for Cloud Storage", International Journal of Emerging Technologies and Innovative Research (www.jetir.org), ISSN:2349-5162, Vol.11, Issue 6, page no.398-403, June-2024, Available :http://www.jetir.org/papers/JETIRGL06067.pdf

"CryptCloud+: Secure and Expressive DataAccess Control for Cloud Storage", International Journal of Emerging Technologies and Innovative Research (www.jetir.org | UGC and issn Approved), ISSN:2349-5162, Vol.11, Issue 6, page no. pp398-403, June-2024, Available at : http://www.jetir.org/papers/JETIRGL06067.pdf