基于CP-ABE的多云存储系统中访问控制模型的研究  

Research on Access Control Model in Multi-clouds Storage System Based on CP-ABE

作　　者：印凯泽 汪海航[1] 

机构地区：[1]同济大学电子与信息工程学院,上海201804

出　　处：《计算机科学》2016年第9期165-168,179,共5页Computer Science

摘　　要：针对将单个云内基于密文策略属性基加密(CP-ABE)的访问控制机制应用到多云存储系统中时遇到的策略冲突问题,设计了一个属性映射机制,通过扩展CP-ABE机制,提出了一个适用于多云存储系统的访问控制模型。这里的映射机制主要针对CP-ABE的树形访问结构以及其支持的属性值类型。最后,详细描述了该模型的框架及工作流程,通过构建一个简单的原型系统验证了该模型的有效性,同时对该原型系统进行了性能分析。该模型的提出对于多云存储系统的访问控制研究具有理论价值和实际意义。Applying the access control system based on ciphertext-policy attributes-based encryption （CP-ABE） in sin- gle cloud to multi-clouds storage system will encounter a problem of policy conflict. Thus, an attributes mapping scheme was designed and an access control model in multi-clouds storage system based on CP-ABE was provided. The attributes mapping scheme was designed based on the access construction tree of CP-ABE and the types of attributes＇ value that is supported. At last, the framework of this model and its workflow were elaborated. The effectiveness of the model is ver- ified by building a simple prototype system, and the performance of the prototype system is analyzed. The proposed model has theoretical value and actual meaning for the research of access control in multi-clouds storage system.

关 键 词：密文策略属性基加密 访问控制 策略冲突 属性映射 多云存储系统 

分 类 号：TP311.5[自动化与计算机技术—计算机软件与理论]