Performance optimization of cloud storage in access control of Ciphertext Policy Attribute-based Encryption

In this research, we address the critical need for enhanced cloud computing security and performance by developing an access control framework. This framework integrates an Ciphertext Policy Attribute-based Encryption (CP-ABE) with mechanisms aimed at optimizing the performance of access policy h...

Full description

Bibliographic Details
Main Author: Mohd Satar, Siti Dhalila
Format: Thesis
Language:English
Published: 2023
Subjects:
Online Access:http://psasir.upm.edu.my/id/eprint/119846/
http://psasir.upm.edu.my/id/eprint/119846/1/119846.pdf
_version_ 1848868067771154432
author Mohd Satar, Siti Dhalila
author_facet Mohd Satar, Siti Dhalila
author_sort Mohd Satar, Siti Dhalila
building UPM Institutional Repository
collection Online Access
description In this research, we address the critical need for enhanced cloud computing security and performance by developing an access control framework. This framework integrates an Ciphertext Policy Attribute-based Encryption (CP-ABE) with mechanisms aimed at optimizing the performance of access policy hiding process while strengthening the users’ privacy and streamlining data access processes. Specifically, we introduce a modified CP-ABE model that incorporates Access Policy Hiding (APH), the Tokenization Identifier (TId) technique, and Priority Task Scheduling (PriTask) to tackle prevalent challenges in cloud storage systems. The core of our proposal lies in the implementation of APH to optimize the performance of concealing access policies, a move that significantly curtails potential privacy breaches by preventing unauthorized entities from gleaning attribute information from access policies. This strategy not only enhances user privacy but also contributes to a reduction in processing time which increase the performance of CP-ABE. Concurrently, the TId technique is employed to mitigate data redundancy within files. This method ensures a more compact plaintext format, thereby reducing the storage cost, optimizing the performance of encryption and minimizing the demands on cloud storage space. To address the inefficiencies during peak traffic periods, our framework incorporates the PriTask module, a scheduling mechanism designed to prioritize decryption tasks. This optimization reduces response times and average delay time, ensuring swift and reliable access to encrypted data stored in the cloud. Our experimental setup utilized a CP-ABE simulation tool, developed using Java and leveraging the CP-ABE open-source library, with foundational support from the Java pairing-based cryptography (JPBC) library. The empirical evidence highlights the efficacy of our approach, revealing a 10.6% improvement in average processing time—679 milliseconds compared to the benchmark of 791 milliseconds. Moreover, our method achieved a nearly 5% reduction in storage cost relative to standard models. The introduction of PriTask notably expedited decryption processes and alleviated response times, further underscoring the performance advantages of our modified CP-ABE framework. In summary, the integration of APH, TId, and PriTask within a modified CP-ABE schema presents a robust solution to the dual challenges of cloud security and data access efficiency. This study not only demonstrates the feasibility of enhancing cloud data management through innovative encryption and scheduling techniques but also sets the stage for future research avenues, including advanced attribute management, multi-tiered access control, and scalability enhancements. Our findings contribute to the ongoing evolution of secure and efficient cloud computing paradigms.
first_indexed 2025-11-15T14:46:30Z
format Thesis
id upm-119846
institution Universiti Putra Malaysia
institution_category Local University
language English
last_indexed 2025-11-15T14:46:30Z
publishDate 2023
recordtype eprints
repository_type Digital Repository
spelling upm-1198462025-10-09T04:09:03Z http://psasir.upm.edu.my/id/eprint/119846/ Performance optimization of cloud storage in access control of Ciphertext Policy Attribute-based Encryption Mohd Satar, Siti Dhalila In this research, we address the critical need for enhanced cloud computing security and performance by developing an access control framework. This framework integrates an Ciphertext Policy Attribute-based Encryption (CP-ABE) with mechanisms aimed at optimizing the performance of access policy hiding process while strengthening the users’ privacy and streamlining data access processes. Specifically, we introduce a modified CP-ABE model that incorporates Access Policy Hiding (APH), the Tokenization Identifier (TId) technique, and Priority Task Scheduling (PriTask) to tackle prevalent challenges in cloud storage systems. The core of our proposal lies in the implementation of APH to optimize the performance of concealing access policies, a move that significantly curtails potential privacy breaches by preventing unauthorized entities from gleaning attribute information from access policies. This strategy not only enhances user privacy but also contributes to a reduction in processing time which increase the performance of CP-ABE. Concurrently, the TId technique is employed to mitigate data redundancy within files. This method ensures a more compact plaintext format, thereby reducing the storage cost, optimizing the performance of encryption and minimizing the demands on cloud storage space. To address the inefficiencies during peak traffic periods, our framework incorporates the PriTask module, a scheduling mechanism designed to prioritize decryption tasks. This optimization reduces response times and average delay time, ensuring swift and reliable access to encrypted data stored in the cloud. Our experimental setup utilized a CP-ABE simulation tool, developed using Java and leveraging the CP-ABE open-source library, with foundational support from the Java pairing-based cryptography (JPBC) library. The empirical evidence highlights the efficacy of our approach, revealing a 10.6% improvement in average processing time—679 milliseconds compared to the benchmark of 791 milliseconds. Moreover, our method achieved a nearly 5% reduction in storage cost relative to standard models. The introduction of PriTask notably expedited decryption processes and alleviated response times, further underscoring the performance advantages of our modified CP-ABE framework. In summary, the integration of APH, TId, and PriTask within a modified CP-ABE schema presents a robust solution to the dual challenges of cloud security and data access efficiency. This study not only demonstrates the feasibility of enhancing cloud data management through innovative encryption and scheduling techniques but also sets the stage for future research avenues, including advanced attribute management, multi-tiered access control, and scalability enhancements. Our findings contribute to the ongoing evolution of secure and efficient cloud computing paradigms. 2023-11 Thesis NonPeerReviewed text en http://psasir.upm.edu.my/id/eprint/119846/1/119846.pdf Mohd Satar, Siti Dhalila (2023) Performance optimization of cloud storage in access control of Ciphertext Policy Attribute-based Encryption. Doctoral thesis, Universiti Putra Malaysia. http://ethesis.upm.edu.my/id/eprint/18479 Cloud computing - Security measures Access control - Data processing Data encryption (Computer science)
spellingShingle Cloud computing - Security measures
Access control - Data processing
Data encryption (Computer science)
Mohd Satar, Siti Dhalila
Performance optimization of cloud storage in access control of Ciphertext Policy Attribute-based Encryption
title Performance optimization of cloud storage in access control of Ciphertext Policy Attribute-based Encryption
title_full Performance optimization of cloud storage in access control of Ciphertext Policy Attribute-based Encryption
title_fullStr Performance optimization of cloud storage in access control of Ciphertext Policy Attribute-based Encryption
title_full_unstemmed Performance optimization of cloud storage in access control of Ciphertext Policy Attribute-based Encryption
title_short Performance optimization of cloud storage in access control of Ciphertext Policy Attribute-based Encryption
title_sort performance optimization of cloud storage in access control of ciphertext policy attribute-based encryption
topic Cloud computing - Security measures
Access control - Data processing
Data encryption (Computer science)
url http://psasir.upm.edu.my/id/eprint/119846/
http://psasir.upm.edu.my/id/eprint/119846/
http://psasir.upm.edu.my/id/eprint/119846/1/119846.pdf