Homomorphic encryption and federated attribute-based multi-factor access control for secure cloud services in integrated space-ground information networks

Abstract

Cloud services are a crucial application form within the integrated space-ground information network, enabling users to access information and services quickly and conveniently. The confidentiality and integrity of cloud data are directly linked to the data security of the integrated space-ground information network, leading to the circulation of cloud data primarily in encrypted form. Research on cloud access control technologies must address encrypted data while accommodating multi-factor descriptions in complex environments. Against this backdrop, this paper proposes a Homomorphic Encryption and Federated Attribute-Based Multi-Factor Access Control (HE-FABAC) scheme by integrating homomorphic encryption technology with federated attribute-based encryption (ABE) and multi-factor access control. First, the design objectives and underlying assumptions are defined. Next, the specific scheme is constructed, detailing the HE-FABAC system model and related algorithms. Finally, the security and characteristics of HE-FABAC are analyzed and compared. By combining homomorphic encryption with federated attribute-based multi-factor access control, HE-FABAC enables multi-factor authorization management for encrypted cloud data. It leverages the computational and storage capabilities of cloud servers, reducing the encryption/decryption workload and key management complexity for individual users.