Aug 2026· PeerJ Computer Science· 1 citation· 43 references
TL;DR
This study proposes a novel approach to secure cloud data access control called the Robust Mechanism for Secure Cloud Data Access Control (SC-DAC), which combines advanced cryptographic techniques such as Ciphertext-Policy Attribute-Based Encryption (CP-ABE) and Hybrid Public Key Encryption.
Abstract
Cloud computing has revolutionized data storage and processing, yet it poses significant security challenges, necessitating robust access control mechanisms. This study proposes a novel approach to secure cloud data access control called the Robust Mechanism for Secure Cloud Data Access Control (SC-DAC), which combines advanced cryptographic techniques such as Ciphertext-Policy Attribute-Based Encryption (CP-ABE) and Hybrid Public Key Encryption. By enabling fine-grained access control based on user attributes and policies, and ensuring data confidentiality and integrity during transmission, SC-DAC addresses critical security challenges in cloud environments. It features two innovative protocols: Partially Outsourced Access Control Protocol (PO-ACP), which allows for partial delegation of access control tasks while retaining oversight of critical functions, and Fully Outsourced Access Control Protocol (FO-ACP), which streamlines operations by fully outsourcing challenge generation and resource accounting to the cloud provider. The mechanism’s effectiveness is rigorously validated through formal verification with the ProVerif tool, mathematical proofs, and informal security analyses, demonstrating resilience against replay attacks, man-in-the-middle attacks, and denial-of-service (DoS) attacks. This comprehensive approach significantly advances cloud security by providing a robust solution to unauthorized access and data breaches. Simulation results further show that SC-DAC achieves superior performance in computation and communication costs, significantly advancing cloud security.
A privacy-preserving, secure data-sharing framework tailored for edge-cloud collaborative architectures that minimizes the computational overhead on the terminal side while safeguarding user privacy, and effectively reduces the overhead associated with user joining and revocation within the same group.
Qikun Zhang, Zheng Cai, Jinbo Feng et al.· Journal of King Saud Univers...· 0 citations
Cloud storage services have become a fundamental component of modern computing infrastructures, enabling scalable and cost-effective data management. However, outsourcing data to remote cloud servers introduces significant security challenges, particularly in ensuring data integrity, secure access control, and efficient auditing of stored information. Existing cloud auditing schemes primarily focus on integrity verification and often rely on trusted third-party auditors, leading to additional trust assumptions, communication overhead, and metadata management complexity. To address these limitations, this research presents a Kerberos-Assisted Secure Data Auditing Protocol (SDAP-K) that integrates authenticated service exchange with lightweight integrity verification for outsourced cloud storage. The proposed framework employs Kerberos-based mutual authentication and ticket-driven access control to establish secure communication among the Data Owner, Authentication Server, Metadata Server, and Cloud Data Server. To verify storage correctness, an N-ary hash tree with the Modified Murmur hash algorithm is used to enable efficient file- and block-level auditing without requiring a trusted third-party auditor. The framework further incorporates metadata-assisted auditing, dynamic data operations, and an error localization and recovery mechanism that identifies and restores corrupted data blocks. Security analysis demonstrates that the proposed protocol mitigates unauthorized access, replay attacks, impersonation attempts, and malicious data modification. Experimental results indicate that SDAP-K reduces storage execution time by 18.6%, retrieval time by 24.3%, update time by 21.8%, file-level auditing overhead by 31.5%, and block-level auditing latency by 36.2% compared with state-of-the-art research, while eliminating the need for a trusted third-party auditor. The results indicate that the proposed framework offers a practical, lightweight, and reliable solution for secure cloud data auditing in enterprise cloud storage environments.
Thangavel Murugan, Nasurudeen Ahamed Noor Mohamed Badusha, Priyan Malarvizhi Kumar et al.· Future Internet· 0 citations
Cloud computing has emerged as a transformative paradigm for delivering scalable, flexible, and cost-effective computing services over the Internet. As organizations increasingly rely on cloud platforms for data storage, application hosting, and resource management, ensuring secure access to cloud resources has become a critical challenge. Authentication and authorization mechanisms play a fundamental role in protecting cloud environments by verifying user identities and regulating access privileges. This paper presents a comprehensive review of user authentication and authorization techniques in cloud computing. The study examines widely adopted authentication approaches, including password-based, multi-factor, biometric, and behavioral authentication methods, as well as authorization models such as Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), and Mandatory Access Control (MAC). Furthermore, recent advancements in artificial intelligence-driven authentication, fine-grained access control, graphical authentication systems, and cloud security frameworks are reviewed and analyzed. The findings indicate a significant transition from traditional security mechanisms toward intelligent, adaptive, and context-aware solutions that enhance security, usability, and access management. The review highlights that multi-factor authentication, biometric technologies, behavioral analytics, and attribute-based authorization frameworks offer improved protection against evolving cyber threats and represent promising directions for securing modern cloud computing environments.
C. Patel· International Journal of Mod...· 0 citations
Saudi enterprises are modernizing critical information systems while facing strict expectations for data protection, continuous availability and accountable cloud governance. Hybrid cloud architecture has become a pragmatic design pattern because it allows sensitive databases, regulated records and latency-sensitive services to remain under direct enterprise control while elastic public-cloud services support analytics, disaster recovery, software delivery and burst capacity. This review paper synthesises recent work from 2020 to 2025 on hybrid cloud security, private cloud platforms, high-availability storage, cloud threat management and Saudi regulatory alignment. The paper develops an integrated review framework and proposes a reference architecture that combines data classification, encrypted storage, zero-trust access, distributed storage, active-active service routing, immutable backup and continuous observability. The findings indicate that Saudi enterprises should treat hybrid cloud as a governed operating model rather than a simple mixture of local and public infrastructure. Secure storage depends on policy-driven data placement, key sovereignty, identity federation, segmentation and auditable transfer controls. High availability depends on removing single points of failure across proxy, control, data, compute, network and storage layers, with routine failover testing and business-aligned recovery objectives. The review contributes a structured control matrix and implementation roadmap for Saudi enterprises that need scalable digital platforms without weakening confidentiality, integrity or service continuity.
Outsourcing Internet-of-Things (IoT) data and computation to cloud and fog infrastructure exposes both the data and the access-control process to integrity, confidentiality, and privacy risks. Attribute-based encryption (ABE) provides fine-grained access control but, as deployed today, suffers from single-authority bottlenecks, expensive policy updates, weak auditability, and exposure to secret-key leakage, classical primitives are additionally threatened by future quantum adversaries. This paper does not propose a new cryptographic scheme. Instead, it contributes a conceptual reference architecture that systematizes how a set of existing, standardized primitives can be composed into a single access-control framework for IoT outsourcing, and it makes the resulting design precise enough to reason about. Concretely, we (i) define a system model and a threat model covering passive, active, colluding, bounded-leakage, and harvest-now-decrypt-later quantum adversaries; (ii) instantiate each layer with a named construction decentralized multi-authority ABE, attribute-based proxy re-encryption for policy updates, a bounded leakage resilient key model, ASCON lightweight AEAD, and ML-KEM/ML-DSA post-quantum primitives, together with a permissioned, on-chain digest/off-chain payload logging layer; (iii) specify the end-to-end data flow and module interfaces; and (iv) give a goal-by-goal security rationale and an analytical evaluation based only on standardized parameter sizes and asymptotic complexity. We are explicit about what is inherited from prior work, what remains to be proven for the composed system, and that a measured prototype evaluation remains future work. The intended value of this paper is to provide a clear, composable, and honestly scoped design that subsequent implementation studies can build upon.
Siddig M. Elkhider· Italian National Conference...· 0 citations
This paper proposes EPPCDS, an efficient privacy-preserving cloud data sharing scheme with blockchain-assisted access control and periodic integrity checking, and demonstrates that it outperforms representative existing schemes in terms of policy creation, policy update, and data access efficiency.
