作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2012, Vol. 38 ›› Issue (11): 20-22,26. doi: 10.3969/j.issn.1000-3428.2012.11.007

所属专题: 云计算专题

• 云计算专题 • 上一篇    下一篇

基于属性群的云存储密文访问控制方案

杨小东,王彩芬   

  1. (西北师范大学数学与信息科学学院,兰州 730070)
  • 收稿日期:2011-12-14 出版日期:2012-06-05 发布日期:2012-06-05
  • 作者简介:杨小东(1981-),男,副教授、博士,主研方向:公钥密码体制,网络安全;王彩芬,教授、博士生导师
  • 基金资助:

    国家自然科学基金资助项目(61163038);西北师范大学 青年教师科研能力提升计划基金资助项目(NWNU-LKQN-10-22)

Cryptographic Access Control Scheme in Cloud Storage Based on Attribute Group

YANG Xiao-dong, WANG Cai-fen   

  1. (College of Mathematics and Information Science, Northwest Normal University, Lanzhou 730070, China)
  • Received:2011-12-14 Online:2012-06-05 Published:2012-06-05

摘要: 提出一种基于属性群的云存储密文访问控制方案。采用对称加密算法加密大型数据文件,并用属性加密算法加密对称密钥,将重加密的任务转移到云服务提供商,从而降低数据拥有者的计算代价,且未向云服务提供商泄露额外信息。在属性和用户权限撤销时,以同一属性集下的不同用户为单位,数据拥有者不参与属性和用户权限的撤销,从而减轻数据拥有者的权限管理代价。分析结果表明,该方案在权限撤销时的效率优于已有的密文访问控制方案,支持细粒度的灵活访问控制策略,具有数据机密性、抗合谋攻击性、前向保密性和后向保密性。

关键词: 密文访问控制, 云存储, 属性群, 用户权限撤销, 重加密

Abstract: This paper proposes a cryptographic access control scheme based on attribute group in cloud storage. The symmetric cryptosystem is used to encrypt the original data by the Data Owner(DO), and the attribute-based encryption algorithm is used to encrypt the symmetric key. DO delegate the task of data re-encryption to the Cloud Service Provider(CSP), which not only reduces the computational cost of DO, but also does not reveal extra information of the plaintext to CSP. The proposed scheme supports the unit of a collection of multiple users when any attribute or user is revoked. The fine-grained and flexible access control can be achieved by hybrid cryptosystem meachanism. Compared with the existing access control schemes, the proposed scheme is more efficient in revocation cost and can alleviate the administering burders on DO. The scheme guarantees collusion resistance against colluding users, data confidentiality, forward and backward secrecy.

Key words: cryptographic access control, cloud storage, attribute group, user revocation, re-encryption

中图分类号: