基于动态重加密的云计算存储平台权限撤销优化机制  

A Cloud-storage Privilege Revoking Optimizing Mechanism Based on Dynamic Re-encryption

作　　者：韩同欣[1] 丁建元[1] 

机构地区：[1]国家气象信息中心,北京100081

出　　处：《科学技术与工程》2015年第20期108-115,共8页Science Technology and Engineering

基　　金：国家自然科学基金(61272511)资助

摘　　要：针对云存储服务中用户访问权限撤销计算与带宽代价过大、复杂度过高等问题。以密文策略的属性加密体制(CP-ABE)的密文访问控制方案作为理论背景,设计出一种基于动态重加密的云存储权限撤销优化机制,即DR-PRO。该机制利用(k,n)门限方案,将数据信息划分成若干块,动态地选取某一数据信息块实现重加密,依次通过数据划分、重构、传输、提取以及权限撤销等子算法完成用户访问权限撤销实现过程。通过理论分析与模拟实验评估表明,在保证云存储服务用户数据高安全性的前提下,DR-PRO机制有效降低了用户访问权限撤销的计算与带宽代价,其性能效率得到了进一步优化与提高。In order to effectively solve overhead computing and bandwidth, high complexity problems about user access privileges revoking of cloud-storage service. A cloud-storage privilege revoking optimizing mechanism was designed （DR-PRO） based on Dynamic re-encryption. Firstly, DR-PRO used （ k, n） threshold algorithm of secret sharing scheme, the data information was divided into a number of blocks, and achieved re-encryption to a data block. Secondly, successively achieved user access privilege revoking by data cutting, data reconstructing, data publishing, data extracting and data revoking sub-algorithms, theoretical analysis and experimental evaluation showed, DR-PRO ensured high data security, effectively reduced the computing and bandwidth overhead, and further optimized and improved the performance.

关 键 词：云存储 密文访问控制 权限撤销 动态重加密 密文策略的属性加密体制 动态重加密的云存储权限撤销优化机制 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]