支持安全共享的云存储系统研究  

Research on cloud storage systems supporting secure sharing

作　　者：宋衍 韩臻[1] 李建军 韩磊[1,2] 

机构地区：[1]北京交通大学智能交通数据安全与隐私保护技术北京市重点实验室,北京100044 [2]信息保障技术重点实验室,北京100072

出　　处：《通信学报》2017年第A01期88-96,共9页Journal on Communications

基　　金：国家自然科学基金资助项目(No.61502030;No.61672092);信息保障技术重点实验室创新基金资助项目(No.61421120401)~~

摘　　要：针对云存储的数据安全共享及效率问题,提出一种实用的云存储系统方案。方案使用对称加密和属性加密,融入代理加密功能,实现加密保护、访问控制和高效检索的无缝结合。基于双线性映射和多项式方程技术,实现连接关键词非域子集搜索。基于外包解密技术,将原属于用户完成的部分解密工作转移到云端服务器完成,降低解密带来的计算开销。对方案的性能进行了分析,并通过实验验证。A practical scheme for the cloud storage system was proposed to ensure security and efficiency during data sharing. The scheme which combine attribute-based encryption, proxy encryption with symmetric encryption, could inte-grate access control, efficient search with encryption well together. The scheme archived conjunctive-keyword non-field subset search by using bilinear mapping and polynomial equation. The scheme reduced the cost of decryption by out-sourcing most of the decryption operations from the terminal to the cloud. At last, the performance was analyzed and an experiment was made for verification.

关 键 词：云存储 属性加密 可搜索加密 解密外包 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]