PODS: Efficient and Secure Identity-Based Hierarchical Data Processing Control in Mobile Cloud Storage

Nowadays, mobile cloud storage has become increasingly prevalent for processing mobile data due to its convenience and resources. Towards the right to restriction of processing in current data regulations, some solutions have been proposed to empower data owners with identity-based hierarchical control for equality, comparison, and plaintext analytics operations. However, existing solutions either rely on specific hardware environments (i.e., trusted execution environments) or face two significant issues: identity privacy breaches, where attackers can identify targeted users, and excessive overhead in multi-user scenarios, as each user requires a distinct ciphertext. In this paper, we leverage multiple cryptographic primitives to introduce PODS, an efficient and secure hierarchical data processing control scheme for multi-user mobile cloud storage. PODS allows the data owner to generate a single ciphertext for multiple users without hardware reliance. Technically, we reconstruct identity-based encryption by leveraging well-designed common and private parameters, thereby shifting the focus from data itself to data processing operations. Then, we encode multiple targeted identities as polynomial coefficients and integrate these coefficients into identity-based data processing control. We achieve threefold benefits, effectively reducing overhead, hierarchically processing users' rights, and concealing the identities of targeted users to protect privacy. Security analysis proves the security of PODS. Experiments demonstrate that PODS achieves around$8\times$and$37\times$improvement in computation and communication compared to existing related works.