一种基于安全策略的云数据访问控制优化技术  

A Security Policy-Based Approach to Optimizing Cloud Data Access Control

作　　者：苏雪[1] 宋国新[2] 

机构地区：[1]武汉铁路职业技术学院,武汉430205 [2]华东理工大学信息科学与工程学院,上海200237

出　　处：《华东理工大学学报（自然科学版）》2016年第6期858-862,共5页Journal of East China University of Science and Technology

基　　金：湖北省教育厅科学技术规划项目(B2015412);国家科技重大专项项目(2010ZX03004-003-03)

摘　　要：云存储安全给访问控制技术带来了新的挑战。提出了一种基于安全策略的云数据访问控制优化方法,基本思想是利用数据关联关系进行安全策略精化,基于属性的安全策略中融合了角色和信誉特征。利用数据关联关系对云数据进行细粒度划分,得到相应的数据块;对策略中的规则和数据块进行匹配和冲突消除,得到精化的安全策略。理论分析和实验结果表明,本文方法对于数据量大的云数据访问控制具有较高的效率。Cloud storage arouses new challenges to access control techniques. This paper proposes a security policy-based method to optimize cloud data access control. The basic idea is to refine security policies according to correlations among cloud resources. Attribute-based security policies comprehend the role of subject and his credit as well. Cloud data are partitioned to fine-grained data blocks, which is guided by correlations among the data. Security policy refinement is obtained by matching policy rules with data blocks and resolving rule conflicts. Theoretical analysis and experiment results show that the proposed method is efficient for access control of cloud data with huge quantity.

关 键 词：云存储 安全策略 信誉 访问控制 优化 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]