A User-Centric Data Secure Creation Scheme in Cloud Computing  

作　　者：SU Mang LI Fenghua SHI Guozhen GENG Kui XIONG Jinbo 

机构地区：[1]School of Computer Science and Engineering,Nanjing University of Science and Technology [2]State Key Laboratory of Information Security,Institute of Information Engineering,Chinese Academy of Sciences [3]Department of Information Security,Beijing Electronic Science and Technology Institute [4]State Key Laboratory of Integrated Services Network,Xidian University

出　　处：《Chinese Journal of Electronics》2016年第4期753-760,共8页电子学报（英文版）

基　　金：supported by the National Natural Science Foundation of China(No.61170251);the Major Science and Technology Project of Press,Publication-Research and Development(No.1681300000119);the National High Technology Research and Development Program of China (863 Program)(No.2012AA013102,No.2012AA01A401);Beijing Natural Science Foundation (No.4152048);the Natural Science Foundation of Jiangsu Province(No.BK20150787)

摘　　要：Due to the use of the cloud computing technology,the ownership is separated from the administration of the data in cloud and the shared data might be migrated between different clouds,which would bring new challenges to data secure creation,especially for the data privacy protection.We propose a User-centric data secure creation scheme(UCDSC) for the security requirements of resource owners in cloud.In this scheme,a data owner first divides the users into different domains.The data owner encrypts data and defines different secure managing policies for the data according to domains.To encrypt the data in UCDSC,we present an algorithm based on Access control conditions proxy re-encryption(ACC-PRE),which is proved to be master secret secure and Chosen-ciphertext attack(CCA) secure in random oracle model.We give the application protocols and make the comparisons between some existing approaches and UCDSC.Due to the use of the cloud computing technology,the ownership is separated from the administration of the data in cloud and the shared data might be migrated between different clouds,which would bring new challenges to data secure creation,especially for the data privacy protection.We propose a User-centric data secure creation scheme（UCDSC） for the security requirements of resource owners in cloud.In this scheme,a data owner first divides the users into different domains.The data owner encrypts data and defines different secure managing policies for the data according to domains.To encrypt the data in UCDSC,we present an algorithm based on Access control conditions proxy re-encryption（ACC-PRE）,which is proved to be master secret secure and Chosen-ciphertext attack（CCA） secure in random oracle model.We give the application protocols and make the comparisons between some existing approaches and UCDSC.

关 键 词：User-centric ACC-PRE Data creation Master secret secure CCA 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构] TP3[自动化与计算机技术—计算机科学与技术]