即时撤销的云数据共享机制的设计  

Design of cloud data sharing mechanism with immediate revocation

作　　者：王雄[1] 庞岩梅[1] 娄嘉鹏[1] 

机构地区：[1]北京电子科技学院信息安全系,北京100070

出　　处：《计算机工程与设计》2016年第9期2332-2336,共5页Computer Engineering and Design

基　　金：北京电子科技学院科研基金项目(2014GCYY08)

摘　　要：针对云存储服务数据共享特性的安全问题,提出一种基于代理重加密机制、具有访问授权功能、支持即时撤销的云端数据共享方案。文件撤销列表实现用户访问权限的即时撤销,用户-密钥表实现用户与密钥的绑定。从涉及的实体、数据交换过程以及安全性等方面对共享方案进行分析,利用Java技术实现基于Hadoop云存储平台的云端数据共享原型系统。测试与分析结果表明了该方案的有效性、安全性与可靠性,其对其它基于代理重加密的云端数据共享应用具有借鉴意义。To solve the safety issues of data sharing characteristics in cloud storage services,based on the proxy re-encryption,a cloud data authorization and sharing mechanism was proposed,which supported immediate revocation access authorization.Immediate revocation of user access privileges was achieved using file revocation list.User and cryptographic key were bound using user-key list.The sharing scheme was introduced with entities,data exchange process and security involved.A cloud data sharing prototype system was implemented on Hadoop cloud platform using Java.Results of tests and analysis of the proposed mechanism show the data sharing is effective,secure and reliable.The work is valuable in the application of proxy re-encryption in cloud data sharing.

关 键 词：即时撤销 数据授权 代理重加密 云存储 数据共享 HADOOP 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]