Efficient revocable ID-based encryption with cloud revocation server

The capability to efficiently revoke compromised/misbehaving users is important in identity-based encryption (IBE) applications, as it is not a matter of if but of when that one or more users are compromised. Existing solutions generally require a trusted third party to update the private keys of nonrevoked users periodically, which impact on scalability and result in high computation and communication overheads at the key generation center. Li et al proposed a revocable IBE scheme, which outsources most of the computation and communication overheads to a Key Update Cloud Service Provider (KU-CSP). However, their scheme is lack of scalability since the KU-CSP must maintain a secret value for each user. Tseng et al proposed another revocable IBE scheme with a cloud revocation authority, seeking to provide scalability and improve both performance and security level. In this paper, we present a new revocable IBE scheme with a cloud revocation server (CRS). The CRS holds only one secret time update key for all users, which provides the capability to scale our scheme. We demonstrate that our scheme is secure against adaptive-ID and chosen ciphertext attacks under the k-CAA assumption and outperforms both schemes mentioned above, in terms of having lower computation and communication overheads.