云存储环境下的密文安全共享机制  

Security sharing scheme for encrypted data in cloud storage

作　　者：姚文斌[1] 韩司[1] 李小勇[1] 

机构地区：[1]北京邮电大学智能通信软件与多媒体北京市重点实验室,北京100876

出　　处：《通信学报》2015年第10期1-8,共8页Journal on Communications

基　　金：国家自然科学基金资助项目(61370069);国家高技术研究发展计划("863"计划)基金资助项目(2012AA012600)~~

摘　　要：云存储环境为海量数据的存储和共享提供方便的同时也带了安全隐患。为保证数据安全,用户将自己的隐私数据加密后存储在开放的云存储环境中,如何建立云存储环境下的密文访问控制机制是亟需解决的问题。基于CP-ABE算法的密文安全共享机制主要解决云存储环境下的密文访问控制问题。共享机制使用2个半可信中心进行密钥的生成和分发,降低访问控制对第三方的依赖性。同时,在用户密钥中加入标识信息,抵抗来自非法用户的串谋攻击。此外,提出用户密钥撤销算法,增强动态安全性。安全分析和实验结果表明,安全共享机制在保障云存储环境下数据安全共享的同时,适用于实际的云存储环境。With the convenient of storing and sharing data in cloud storage environment, the concerns about data security arised as well. To achieve data security on untrusted servers, user usually stored the encrypted data on the cloud storage environment. How to build a cipertext-based access control scheme became a pot issue. For the access control problems of ciphertext in cloud storage environment, a CP-ABE based data sharing scheme was proposed. Novel key generation and distribution strategies were proposed to reduce the reliance on a trusted third party. Personal information was added in decryption key to resistant conclusion attacks at the same time. Moreover, key revocation scheme was proposed to provide the data backward secrecy. The security and implement analysis proves that proposed scheme is suit for the real application environment.

关 键 词：云存储 属性加密 访问控制 数据共享 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]