云存储环境下基于CP-ASBE数据加密机制  

CP-ASBE based data encryption mechanism for cloud storage

作　　者：杨晓晖[1] 丁文卿[1] 

机构地区：[1]河北大学计算机科学与技术学院,河北保定071002

出　　处：《河北大学学报（自然科学版）》2016年第4期424-431,共8页Journal of Hebei University(Natural Science Edition)

基　　金：国家科技支撑计划项目(2013BAK07B04);河北省自然科学基金资助项目(F2014201152)

摘　　要：针对基于属性集合加密机制依赖一个授权中心进行密钥计算,容易成为系统安全瓶颈问题,提出基于多个属性授权机构的属性集合加密机制,提高密钥的安全性.授权中心由多个属性授权机构(attribute authority,AA)构成,每个AA负责管理部分属性集合,完整的密钥计算需要多个AA的参与,提高攻击难度.将该机制应用于云环境,对文件加密、密钥计算及文件解密进行分析,设计云存储环境下行之有效的数据加密机制,并对该机制的安全性及时间开销进行分析,实验表明该方法是可行的.Attribute set encryption mechanism relies on an authorization center to generate key, which may easily become a system security bottleneck problem. So an authorization set encryption mechanism based on multiple attribute authorized institution is proposed.It can improve the security of the secret key. The authorization center consists of many attribute authorized institutions. To increase attack difficulty, many AA participate the complete key calculation.Each AA is responsible for managing some of the attrib- utes set.In this paper,file encryption,key calculation and file decryption have been analyzed in cloud envi- ron- ment.Data encryption mechanism has been efficiently designed under the cloud storage environment. The safety and overhead problems in the mechanism are also considered. Experiments indicated that the proposed method is effective.

关 键 词：云存储 CP-ASBE 加密机制 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]