面向移动云的属性基密文访问控制优化方法  

Optimization method for attribute-based cryptographic access control in mobile cloud computing

作　　者：刘建[1] 鲜明[1] 王会梅[1] 荣宏[1] LIU Jian;XIAN Ming;WANG Huimei;RONG Hong(College of Electronic Science,National University of Defense Technology,Changsha 410073,China)

机构地区：[1]国防科技大学电子科学学院,湖南长沙410073

出　　处：《通信学报》2018年第7期39-49,共11页Journal on Communications

摘　　要：针对移动云数据安全共享与访问控制问题,综合考虑当前密文访问控制机制的不足以及移动终端资源受限、网络带宽较低等特点,提出了一种面向移动云的属性基密文访问控制优化方法。通过引入属性基加密运算分割和双重加密机制,并结合多秘密共享技术进行改进,实现了移动用户数据发布和权限管理开销的大幅优化。理论和实验分析表明,所提方案在安全性、计算和网络开销等方面均能够满足移动云中的访问控制需求,具有良好的应用前景。For the problem of secure data sharing and access control in mobile cloud,the drawback of traditional cryptographic access control schemes was deeply analyzed.Considering the truth that mobile devices were usually equipped with limited resources,an optimized attribute-based cryptographic access control scheme was proposed in this study.In the proposed scheme,a third party proxy was introduced into the system model,and the two-layer encryption method was applied.Combining traditional attribute-based encryption(ABE)algorithm with multi-secret sharing and split measurement of ABE encryption,the scheme could greatly reduce the cost of mobile users in terms of data publish and access management.Theoretical and experimental analysis shows that the contribution can well meet the requirements of mobile cloud in terms of security,computational complexity and communication cost,which means that it is promising for future applications.

关 键 词：移动云 访问控制 双重加密 属性基加密 优化 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]