基于CP-ABE访问控制系统的设计与实现  

Design and Implementation for Access Control System Based on CP-ABE

作　　者：周彦萍[1,2] 马艳东 

机构地区：[1]河北省科学院应用数学研究所,河北石家庄050081 [2]河北省信息安全认证工程技术研究中心,河北石家庄050081 [3]石家庄开发区冀科双实科技公司,河北石家庄050081

出　　处：《计算机技术与发展》2014年第2期145-148,152,共5页Computer Technology and Development

基　　金：河北省科技支撑计划项目(12253570D)

摘　　要：在访问控制中,传统公钥加密由于其需要对接收群体的每个成员用其公钥加密,再分发,因此需要获取接收群体中每个成员的身份。但是,在分布式应用中,却难以一次获取接收群体的规模与成员身份。如果列举用户身份,则会损害用户隐私。基于密文策略的属性加密体制(CP-ABE),由于其广播式的、授权人通过满足某些条件就能确定的特点,避免了由于必须获取这些信息而引出的数据安全问题。于是,文中给出了一种基于CP-ABE的混合加密访问控制系统的设计与实现方案。通过实际项目的成功应用,证明了该方案的可行性与优越性。In access control, due to the need to encrypt with the public key for every member of group in traditional public encryption, then to distribute, so you need to get each member identity of the group. But it is difficult to get all information of receiving group. If list the users＇ identity, will damage the users＇ privacy. The CP- ABE, because of the characteristics of broadcasting, the authorized person by satisfying certain conditions to determine, avoids the problems of data security caused by having to get the information. So present a scheme of design and implementation of hybrid encryption access control system based on CP-ABE. Through the successful application of actual project, prove the feasibility and superiority of the scheme.

关 键 词：密文策略的属性加密 基于属性的加密体制 密文策略 访问控制 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]