Access control scheme to big data using privacy preserving policy

Controlling the access to a huge amount of big data becomes a very challenging issue, especially when big data are stored in the cloud. Ciphertext-policy attribute-based encryption (CP-ABE) is a encouraging encryption technique that helps end-users to encrypt their data under the access policies defined over some attributes of data consumers and only allows data consumers whose attributes satisfy the access policies to decrypt the data. In CP-ABE, the access policy is attached to the ciphertext in plaintext form, which may also leak some private information about end-users. The attribute values were partially hidden in the already existing systems, while the attribute names are still unprotected. In this paper, we propose access control scheme to big data using privacy preserving policy. Specifically, we hide the whole attribute (rather than only its values) in the access policies. To aid data decryption, we also design a novel attribute bloom filter to evaluate whether an attribute is in the access policy and locate the exact position in the access policy if it is in the access policy. Security analysis and performance evaluation show that our scheme can preserve the privacy from any linear secret-sharing schemes access policy without employing much overhead.