Cloud computing provides a convenient way of content trading and sharing.In this paper,we propose a secure and privacy-preserving digital rights management(DRM)scheme using homomorphic encryption in cloud computing.We present an efficient digital rights management framework in cloud computing,which allows content provider to outsource encrypted contents to centralized content server and allows user to consume contents with the license issued by license server.Further,we provide a secure content key distribution scheme based on additive homomorphic probabilistic public key encryption and proxy re-encryption.The provided scheme prevents malicious employees of license server from issuing the license to unauthorized user.In addition,we achieve privacy preserving by allowing users to stay anonymous towards the key server and service provider.The analysis and comparison results indicate that the proposed scheme has high efficiency and security.
The online social networks(OSNs) offer attractive means for social interactions and data sharing, as well as raise a number of security and privacy issues. Although current solutions propose to encrypt data before sharing, the access control of encrypted data has become a challenging task. Moreover, multiple owners may enforce different access policy to the same data because of their different privacy concerns. A digital rights management(DRM) scheme is proposed for encrypted data in OSNs. In order to protect users' sensitive data, the scheme allows users outsource encrypted data to the OSNs service provider for sharing and customize the access policy of their data based on ciphertext-policy attribute-based encryption. Furthermore, the scheme presents a multiparty access control model based on identity-based broadcast encryption and ciphertext-policy attribute-based proxy re-encryption, which enables multiple owners, such as tagged users who appear in a single data, customize the access policy collaboratively, and also allows the disseminators update the access policy if their attributes satisfy the existing access policy. Security analysis and comparison indicate that the proposed scheme is secure and efficient.
