社交网络中具有可传递性的细粒度访问控制方案  

Fine-grained access control scheme for social network with transitivity

作　　者：高训兵 马春光 赵平[1] 肖亮[1] 

机构地区：[1]哈尔滨工程大学计算机与科学技术学院,哈尔滨150001 [2]网络与数据安全四川省重点实验室(电子科技大学),成都611731

出　　处：《计算机应用》2013年第1期8-11,39,共5页journal of Computer Applications

基　　金：国家自然科学基金资助项目(61170241);网络与数据安全四川省重点实验室开放课题(201107);黑龙江省教育厅科学技术研究项目(12513049)

摘　　要：针对社交网络中隐私保护的需求,基于属性基加密(ABE)算法,提出了一种权限可传递性的细粒度访问控制方案。在方案中通过属性的设置实现了社交网络成员不同粒度的刻画,为细粒度加密和访问提供了基础;同时在方案中引入了代理服务器,对非授权成员与授权成员之间的关系进行分析,从而判定非授权成员的访问权限。若该成员可以获得访问权限,密钥生成中心依据授权成员的属性为其生成解密密钥,进而实现访问权限的传递性。与其他基于访问控制或加密技术的隐私保护方案相比,所提方案将对数据的访问控制和加密保护相统一,在实现数据加密的同时,提供细粒度的访问控制;并结合社交网络的特点实现了访问权限的传递性。A fine-grained access control scheme based on Attribute-Based Encryption （ABE） was proposed to satisfy the demands for the protection of personal privacy in social network. The scheme realized the description for different granularity of members in social network through the setting of the property, which is the basis for the fine-grained encryption and access control. In particular, a proxy server was introduced to judge the relationship between the unauthorized members and authorized members. If the unauthorized members were judged to have the access rights, the key generation center would generate private keys for them based on ABE. The scheme achieved the transitivity of the access rights. Compared with other privacy protection methods based on access control or encryption technique, the proposed scheme combined access control with encryption and realized encryption and fine-grained access control at the same time.

关 键 词：社交网络 属性基加密 细粒度 访问控制 可传递性 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]