云计算环境中基于属性的多权威访问控制方法  

Attribute-Based Access Control with Multi-Authority Structure in Cloud Computing

作　　者：杨庚[1] 王东阳[1] 张婷[1] 闵兆娥[1] 

机构地区：[1]南京邮电大学计算机学院,江苏南京210023

出　　处：《南京邮电大学学报（自然科学版）》2014年第2期1-9,共9页Journal of Nanjing University of Posts and Telecommunications：Natural Science Edition

基　　金：国家重点基础研究发展计划(973计划)(2011CB302903);国家自然科学基金(61272084;61202004);江苏省高校自然科学研究重大项目(11KJA520002);高等学校博士学科点专项科研基金(20113223110003;20093223120001)资助项目

摘　　要：在云计算环境中,如何实现在不可信及动态变化的云计算环境中对加密数据的访问控制是云计算走向实际应用亟待解决的问题之一。文中提出了一种基于属性的访问控制方法,该方法将密文长度及加解密过程的计算量限制为固定值,提高了系统的计算效率,并且引入了层次化的授权结构,降低了单一权威授权的负担,提高了安全性。文中分析了方法的安全性、可扩展性和计算复杂性等性能,实验结果证明了该方法在域权威授权、用户授权及加解密等过程中的计算量上的优越性。How to achieve practicable and efficient access control for the encrypted private data in dynam- ic and untrusted cloud computing environment is one of the urgent problems . This paper proposes a hier- archical attribute-based access control scheme for improving the compute efficiency because of the con- stant size of ciphertext and computation costs in encryption and decryption algorithms. Furthermore, the hierarchical authorization structure is introduced , the burden is reduced in the case of one single authori- ty making the scheme secure, efficient and scalable. The security , the scalability and the computational complexity are analyzed. Experimental results demonstrate the superiority of computation costs in domain authority grant, user grant, encryption and decryption compared with others.

关 键 词：云计算 定长密文 访问控制 多权威 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]