基于属性加密的多用户共享ORAM方案  

Multi-user sharing ORAM scheme based on attribute encryption

作　　者：付伟[1] 顾晨阳 高强 FU Wei;GU Chenyang;GAO Qiang(Department of Information Security,Naval University of Engineering,Wuhan Hubei 430033,China;Command and Support Brigade,Naval Staff,Beijing 100841,China)

机构地区：[1]海军工程大学信息安全系,武汉430033 [2]海军联合参谋部指挥保障大队,北京100841

出　　处：《计算机应用》2020年第2期497-502,共6页journal of Computer Applications

基　　金：国家自然科学基金资助项目(61672531);总装后勤科技重大项目子课题(AWS14R013)~~

摘　　要：不经意随机访问机(ORAM)是保护用户访问行为隐私安全的关键技术之一,但现有ORAM方案主要针对单用户访问需求,不支持多用户之间的数据共享。结合Ring ORAM方案和属性加密(ABE)技术,设计并实现了一种基于属性加密的多用户共享ORAM方案ABE-M-ORAM。该方案利用属性加密实现了细粒度的访问控制,既保护了用户访问行为的安全,又实现了用户之间便捷的数据共享。理论分析和仿真实验证明该方案具有较高的安全性、实用性以及较好的访问性能。Oblivious Random Access Machine(ORAM)is one of the key technologies to protect the privacy security of the user access behaviors.However,existing ORAM schemes mainly focus on the single-user access requirements and cannot support data sharing between multiple users.Combined with Ring ORAM scheme and Attribute Based Encryption(ABE)technology,a multi-user sharing ORAM scheme was designed and implemented based on attribute encryption,namely ABE-M-ORAM.Attribute encryption was adopted to achieve the fine-grained access control,which can not only protect user access behavior security,but also realize the convenient data sharing between different users.Theoretical analysis and simulation experiments verify the high security,practicability and good access performance of the proposed scheme.

关 键 词：云存储安全 不经意随机访问机 多用户共享 属性加密 访问控制 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]