一种基于混合属性的多授权中心云访问方案  

A Mixed Attributes-based Multi-authority Cloud Access Scheme

作　　者：荣星[1,2] 江荣[3] 

机构地区：[1]解放军信息工程大学三院,河南郑州450004 [2]北京工业大学计算机学院,北京100124 [3]国防科学技术大学六院,湖南长沙410073

出　　处：《信息网络安全》2016年第11期6-11,共6页Netinfo Security

基　　金：国家高技术研究发展计划(国家863计划)[2015AA016002]

摘　　要：针对云计算外包模式带来的数据安全问题,文章提出了一种云存储环境下的混合属性基数据访问控制方案。访问结构中引入了由数据属主直接控制的权限属性,并与传统访问控制树相结合,使得数据属主能够独立控制数据的访问,解决了由授权中心分发用户属性私钥引起的偷窥问题。方案支持用户属性撤销和用户直接撤销,并在用户属性撤销中使用了代理重加密方案,可有效降低数据属主的计算代价。理论分析和实验结果表明,本方案能有效保护云存储数据的机密性并且属性撤销效率高,能够很好地满足多授权中心环境要求。The mode of outsourcing brings about new challenges for data security and access control in cloud computing,a multi-authority cloud access scheme with mixed access structure is put forward. After adding owner-defined permission attribute to traditional access structure, owner can decide which user has the right to access data and prevent attribute authority from peeking. User＇s attribute and direct revocation methods can provide real-time privilege updating in multi-authority system, the former adopts proxy re-encryption to reduce the computing cost of data owner. Analysis shows that oxir proposed scheme is secure for protecting stored data under existing security models and highly efficient in attribute revocation, which is suitable for multi-authority cloud.

关 键 词：云计算 属性基加密 多授权中心 属性撤销 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]