TY - JOUR
T1 - MAC-UAE
T2 - Multi-Level Access Control Based on Updateable Attribute Encryption of Secure Data in Mobile Cloud Center
AU - Chen, Guorong
AU - Wu, Na
AU - Srivastava, Gautam
AU - Alharbi, Meshal
AU - Herencsar, Norbert
N1 - Publisher Copyright:
© The Author(s), under exclusive licence to Springer Science+Business Media, LLC, part of Springer Nature 2025.
PY - 2025
Y1 - 2025
N2 - Security of user attributes (including identity, role, real-time location and access time, etc.) show highly dynamic characteristics in mobile cloud computing. Static permission management used in current information security and access control is difficult to adapt to the dynamic commonly, resulting in permission allocation lagging behind the actual change of user attributes, increasing the risk of illegal data access. Therefore, this paper proposes a multi-level access control for secure data based on updateable attribute encryption (MAC-UAE) in mobile cloud center. First, MAC-UAE constructs an efficient and collaborative data transmission model for cloud center, which seamlessly interconnects nodes through data center switches to ensure the flexibility and reliability of data transmission. On this basis, it constructs an adaptive access control system centered on subject, object and access policy attributes, which responds to attribute updates realtime and sets access rights boundary accurately. Then, with comprehensive credibility by user attributes, optimization tree is used to change the access control policy by automatically generating and dynamically updating the set attribute key of the high-credibility user, which ensures the fineness and security of the rights management. Finally, MAC-UAE intelligently selects the optimal transmission path according to the real-time update state of the key, and realizes the flexible multi-level access control of secure data in the mobile cloud center through authentication and attribute key decryption. Experimental results show that both the credibility and efficiency of the proposed MAC-UAE is better than exist methods with multiple scales.
AB - Security of user attributes (including identity, role, real-time location and access time, etc.) show highly dynamic characteristics in mobile cloud computing. Static permission management used in current information security and access control is difficult to adapt to the dynamic commonly, resulting in permission allocation lagging behind the actual change of user attributes, increasing the risk of illegal data access. Therefore, this paper proposes a multi-level access control for secure data based on updateable attribute encryption (MAC-UAE) in mobile cloud center. First, MAC-UAE constructs an efficient and collaborative data transmission model for cloud center, which seamlessly interconnects nodes through data center switches to ensure the flexibility and reliability of data transmission. On this basis, it constructs an adaptive access control system centered on subject, object and access policy attributes, which responds to attribute updates realtime and sets access rights boundary accurately. Then, with comprehensive credibility by user attributes, optimization tree is used to change the access control policy by automatically generating and dynamically updating the set attribute key of the high-credibility user, which ensures the fineness and security of the rights management. Finally, MAC-UAE intelligently selects the optimal transmission path according to the real-time update state of the key, and realizes the flexible multi-level access control of secure data in the mobile cloud center through authentication and attribute key decryption. Experimental results show that both the credibility and efficiency of the proposed MAC-UAE is better than exist methods with multiple scales.
KW - Access control
KW - Attribute encryption
KW - Mobile cloud center
KW - Multi-level control
KW - Upodateable
UR - http://www.scopus.com/inward/record.url?scp=105002631445&partnerID=8YFLogxK
U2 - 10.1007/s11036-025-02451-y
DO - 10.1007/s11036-025-02451-y
M3 - Article
AN - SCOPUS:105002631445
SN - 1383-469X
JO - Mobile Networks and Applications
JF - Mobile Networks and Applications
ER -