Dynamic Access Control Scheme Based on Single Sign-On in Cloud Storage

Access control in a cloud storage environment is important for enterprises. However, for files stored on different cloud servers, the traditional access control scheme requires users to log in to each server separately to obtain access permissions, which greatly reduces the efficiency of user authentication. Moreover, the revoked user may collude with a semi-honest server, posing a threat to system security. In order to alleviate these problems, we propose SSO-ABE, a novel and efficient access control scheme. Firstly, we have optimized traditional attributebased encryption (ABE) scheme and added attribute revocation and policy update functions. In addition, we integrate the single sign-on (SSO) mechanism into the access control scheme and write user attributes into the token, which greatly reduces the computing overhead in the multi-server scenario. Furthermore, we use a trusted proxy server instead of cloud servers for computing operations to ensure the security of access control. Theoretical analysis and experiments demonstrate SSO-ABE’s effectiveness against collusion attacks and efficiency in multiserver scenario, thereby providing a comprehensive solution for secure and efficient access control.