One enhanced secure access scheme for outsourced data

Abstract The popularity of apps makes smartphones rapidly become the most widespread form of communication. Due to the impact of resource constraints on mobile phones, users prefer to outsource data from the local device to the cloud. Access control of outsourced data drives the research for protecting sensitive data from all the possibly malicious software access or cloud service provider misbehavior. The unexpected attacks from the local device or the cloud trying to breach the data access policy imposed by data owners have resulted in inadequate access control solutions. Therefore, this paper proposes one access control scheme for Android devices to avoid authentication bypass attacks from both sides. Attribute-Based encryption is used to design one app-level fine-grained data access for data confidentiality on the local side. Further, Trusted Execution Environment is employed as a trusted computing environment that provides essential security services to protect encrypted data from unwanted access by cloud service providers or unauthorized apps from the local side. Finally, a prototype system is implemented, and the performance is evaluated on the various operations used in the scheme. The experimental results show that the enhanced secure access model is flexible, efficient, and secure for outsourcing data to the cloud.