2
$\begingroup$

So if possible could someone tell me or at least recommend a book.

|improve this question
$\endgroup$
3
$\begingroup$

From my understanding, ABE provides a secure and automatic way to enforce access control, but access control may not involve encryption.

In the ABE setting, the resources (that one wants to access) are encrypted by a "controller" and then the ciphertexts are made public. Then, the controller doesn't need to interact with the user to control its access, because such access control enforcement can be guaranteed by the security of the underlying encryption scheme.

However, in a general access control setting, a "controller" (e.g., an OS or an application) may need to interact with a user (e.g., via an OS access control mechanism or a login system) and grant it the correct access right each time the user wants to access some resources. The resources here may not be encrypted, but are only available to the "controller".

|improve this answer
$\endgroup$
  • $\begingroup$ what do you mean by a controller? $\endgroup$ – user658961 Nov 9 '18 at 18:01
  • $\begingroup$ @user658961 It's the party who owns the resources. In ABE, the controller encrypts the resources for the users (with different attributes) to decrypt. $\endgroup$ – Shan Chen Nov 9 '18 at 18:07

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.