云计算中一种紧凑型的外包访问控制方案  

A Compact and Outsourced Access Control Scheme in Cloud Computing

作　　者：王树兰[1,2] 喻建平[1,2] 张鹏[2] 王廷[2] 

机构地区：[1]深圳大学信息工程学院,深圳518060 [2]深圳大学ATR国防科技重点实验室,深圳518060

出　　处：《信号处理》2015年第10期1224-1232,共9页Journal of Signal Processing

基　　金：中央财政支持地方高校发展专项资金资助(项目名称:云计算中的访问控制方案研究;项目编号:000022070143);国家自然科学基金(61171072);深圳市科技计划资助项目(ZDSYS20140430164957660;CXB201104210002A;JCYJ20130329115832637)

摘　　要：密文策略的属性加密是实现云平台上安全的访问控制方案的最佳选择。然而,在大多数密文策略的属性加密方案中,用户密钥长度与属性的个数之间成线性关系;用户的解密时间与访问结构的复杂度成正比关系。为了减少用户密钥的存储和解密计算开销,本文提出一种面向云计算平台的紧凑型的外包访问控制方案。方案中的访问结构可以支持"与"、"或"以及"门限"三种策略。它仅采用简单的哈希和异或运算就可以验证用户外包解密返回的数据是否正确。在随机预言机模型中,基于aMSE-DDH难题,证明了方案是选择密文攻击安全的。分析表明,本文方案能够安全的实现云计算环境下的访问控制,尤其当用户终端设备受限时实现的访问控制。Ciphertext-Policy Attribute-Based Encryption（ CP-ABE） is a promising encryption technology for secure access control in cloud computing. However,in most of the existing CP-ABE schemes,the size of decryption key linearly increases with the number of attributes,and the decryption time follows a linear relationship with the complexity of access structure increasing. To reduce the storage cost of user＇s key and the time cost of decryption,in this paper,a compact and outsourced access control scheme is provided in cloud computing. In the proposed scheme,access structure associated with ciphertext can support three policies： AND,OR,and Threshold. At the same time,it can verify the result of outsourcing decryption only using some hash computations and XOR operations. Based on the a MSE-DDH problem,the proposed scheme is proved to be selectively secure against chosen-ciphertext attack in the random oracle model. In addition,the analyses show that it is efficient to securely achieve access control in cloud computing,especially when the terminal devices associated with user are constrained.

关 键 词：云计算 访问控制 属性基加密 密钥长度固定 外包解密 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]