International Association for Cryptologic Research

International Association
for Cryptologic Research


Paper: Attribute-Based Encryption for Fine-Grained Access Control of Encrypted Data

Vipul Goyal
Omkant Pandey
Amit Sahai
Brent Waters
Search ePrint
Search Google
Abstract: As more sensitive data is shared and stored by third-party sites on the Internet, there will be a need to encrypt data stored at these sites. One drawback of encrypting data, is that it can be selectively shared only at a coarse-grained level (i.e., giving another party your private key). We develop a new cryptosystem for fine-grained sharing of encrypted data that we call Key-Policy Attribute-Based Encryption (KP-ABE). In our cryptosystem, ciphertexts are labeled with sets of attributes and private keys are associated with access structures that control which ciphertexts a user is able to decrypt. We demonstrate the applicability of our construction to sharing of audit-log information and broadcast encryption. Our construction supports delegation of private keys which subsumes Hierarchical Identity-Based Encryption (HIBE).
  title={Attribute-Based Encryption for Fine-Grained Access Control of Encrypted Data},
  booktitle={IACR Eprint archive},
  keywords={public-key cryptography /},
  note={Extended abstract to appear in ACM CCS 2006. This is the full version. 13428 received 31 Aug 2006, last revised 7 Oct 2006},
  author={Vipul Goyal and Omkant Pandey and Amit Sahai and Brent Waters},