基于CP-ABE算法的云存储数据访问控制方案设计  

Data Access Control Scheme Design for Cloud Storage Based on CP-ABE Algorithm

作　　者：魏巍[1] 陆幼骊[1] 俞艺涵 

机构地区：[1]海军指挥学院,南京211800 [2]海军工程大学信息安全系,武汉430033

出　　处：《舰船电子工程》2017年第7期70-74,共5页Ship Electronic Engineering

基　　金：国家自然科学基金项目(编号:61100042);信息保障技术国防重点实验室基金项目(编号:KJ-13-111)资助

摘　　要：云存储暴露出诸多安全问题,影响其发展速度。针对云存储安全问题,提出一项改进的基于密文策略属性加密的访问控制方案,通过使用门限访问控制结构对CP-ABE算法的原访问控制结构进行改进,以期提升运算效率,通过将用户ID与密钥绑定,增强云平台安全性。文章首先对研究背景进行介绍;其次对整体方案进行详细说明;最后对新方案的安全性与运行效率进行理论分析和仿真实验测试。安全性分析表明,论文方案可实现细粒度访问控制并有效防御多用户共谋攻击。仿真实验结果表明相比传统方案,加解密效率大幅提升。In the process of cloud storage development, it exposed a lot of security issues, affecting the cloud computing＇s development. In order to solve the security problem of cloud storage, this paper proposes an improved access control scheme based on ciphertext policy attribute encryption. Threshold access control structure is used to improve the original access control structure, in order to enhance the efficiency of the operation. Making the user？s ID and key binding is to increase the cloud platform security. Firstly , the test introduces background of the research. Secondly, the whole scheme is described in detail. Finally, the security and operational efficiency of the scheme are theoretically analyzed and simulated by experiment. Security analysis shows that this scheme can achieve fine-grained access control and defense of multi-user conspiracy attacks. Simulation results show that compared with the traditional scheme, the efficiency of the new scheme is greatly improved when the number of user attributes increases.

关 键 词：云计算 数据存储 访问控制 CP-ABE算法 存储安全 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]