云存储中基于属性的密文策略访问控制方法  

Method of Access Control of Attribute-based Ciphertext Policy for Cloud Storage

作　　者：史庭俊[1] 张颖杰[1] 

机构地区：[1]扬州大学信息工程学院,江苏扬州225009

出　　处：《计算机与现代化》2017年第7期111-116,共6页Computer and Modernization

摘　　要：研究一种云存储中高效的基于属性加密的密文策略(Ciphertext-policy Attribute-based Encryption,CP-ABE)的访问控制方法。它采用非对称加密的方法加密数据,当撤销用户的属性时,授权产生新的属性组版本号密钥,交由云存储服务者再次加密密文,从而降低数据所有者的计算成本。由于本方案不需要更新用户私钥,因而减少了算法运算复杂度。通过相应的理论分析和实验表明,该方法在用户属性发生撤销时数据安全性较高。在降低授权计算负载和网络通信开销方面做了相应的贡献。This paper puts forward an access control method with ciphertext-policy attribute-based encryption in cloud storage. It encrypts the data with asymmetric encryption. As the attribute of users is revoked, authority generates new version key of attribute group which is sent to the cloud to reencrypt the ciphertext so as to decrease the computing overload of data owner. Because this method doesn＇t need to update the private key of users, the complexity of algorithm is decreased. The theoretical analysis and ex- periment result show that this method performs well in the security of data as the attribute of users is revoked. In addition, the method also makes some contributions for reducing the computing overload of authority and transmission cost.

关 键 词：云存储 访问控制 属性撤销 重加密 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]