Fully Decentralized Authentication and Revocation Scheme in Data Sharing Systems.

In this paper, we propose a fully decentralized authentication and revocation scheme(f-DMA) based on multi-authority attribute-based encryption that can be used in data sharing systems with multiple distrusted authorizes. This scheme establishes a fully decentralized secret key generation and key distribution systems, which eliminates the security risk on central authority(CA) compromise and is resilient to authority and user collusion attacks. Our system also provides computation efficient revocation that can achieve both specific user revocation and attribute revocation. We prove our scheme correct under the Decisional Bilinear Diffie-Hellman (DBDH) assumption; we also include a complete end-to-end implementation that demonstrates the practical efficacy of our technique.