ReACE: A novel re-encryption based access control enforcement management mechanism in DaaS

In this paper, we present a novel ReACE approach to implement flexible access control enforcement management by Database Service Provider (DSP) through combining a DSP re-encryption mechanism with access control policy of Data Owner (DO). Our approach implements selective authorization by DSP on the delegated database and at the same time helps prevent theft of delegated sensitive data and is very applicable to the light client. Through empirical data we demonstrate the efficiency and security of our approach.