云存储环境下的数据防泄露保护方案  

Scheme for data leakage protection in cloud storage environment

作　　者：杨燕莉[1,2] 肖攸安[1,2] 张萍[1] Yang Yanlia b Xiao Youana

机构地区：[1]武汉理工大学信息工程学院,武汉430070 [2]武汉理工大学光纤传感技术与信息处理教育部重点实验室,武汉430070

出　　处：《计算机应用研究》2016年第12期3759-3765,3790,共8页Application Research of Computers

基　　金：国家科技支撑计划资助项目(2014BAH26F03);交通运输部建设科技项目(2015328811180)

摘　　要：针对云存储环境下的数据防泄露问题,提出了一种适用于云存储环境下的数据防泄漏保护方案。该方案把用户属性值作为加密参数,控制密文的生产过程,使得只有具备特定属性的访问用户才能通过其私钥对关键字进行搜索。该方案使得根据属性值的不同来控制用户访问的范围成为可能,从而达到细粒度访问控制的目的。该方案在解密方不固定的情况下具有很好的灵活性和适用性。与已有方案相比,通过功能测试验证了该方案的可行性,通过性能测试验证了该方案相对其他传统方案的高效性。To solve the problems of data leakage protection in cloud storage environment, this paper proposed a suitable scheme. This scheme could control the production process of the cipher text by using users＇ attribute value as encryption parameter. Only users with specific attributes could search for keywords through their own private keys. This scheme made it possible tO control users＇ access scope according to different attribute values, so as to achieve the purpose of fine-grained access control. The scheme has good flexibility and applicability when decrypting party is not fixed. The function test verifies feasibility of this scheme, and the performance test shows the proposed scheme is more efficient than other traditional schemes.

关 键 词：云存储 属性加密 带密钥的哈希函数 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]