工业互联网中增强安全的云存储数据访问控制方案  

Security-enhanced data access control for multi-authority cloud storage in industrial Internet

作　　者：张亚兵 王健[1,2] 邢镔[3,4] Zhang Yabing;Wang Jian;Xing Bin(College of Computer Science,Chongqing University,Chongqing 400044,China;Key Laboratory of Dependable Service Computing in Cyber Physical Society,Chongqing 400044,China;Chongqing Innovation Center of Industrial Big-Data Co.Ltd.,Chongqing 400707,China;National Engineering Laboratory for Industrial Big-Data Application Technology,Chongqing 400707,China)

机构地区：[1]重庆大学计算机学院,重庆400044 [2]信息物理社会可信服务计算教育部重点实验室,重庆400044 [3]重庆工业大数据创新中心有限公司,重庆400707 [4]工业大数据应用技术国家工程实验室,重庆400707

出　　处：《计算机应用研究》2021年第12期3765-3770,共6页Application Research of Computers

基　　金：国家重点研发计划资助项目(2017YFB0802400)。

摘　　要：在工业互联网应用中,由于异构节点计算和存储能力的差异,通常采用云方案提供数据存储和数据访问服务。云存储中的访问控制如扩展多权限的云存储数据访问控制方案(NEDAC-MACS),是保证云存储中数据的安全和数据隐私的基石。给出了一种攻击方法来证明NEDAC_MACS中,被撤销的用户仍然可以解密NEDAC-MACS中的新密文;并提出了一种增强NEDAC-MACS安全性的方案,该方案可以抵抗云服务器和用户之间的合谋攻击;最后通过形式密码分析和性能分析表明,该方案能够抵抗未授权用户之间以及云服务器与用户之间的合谋攻击,保证前向安全性、后向安全性和数据保密性。In the application of industrial Internet,due to the differences in computing and storage capabilities of heterogeneous nodes,cloud solutions are generally used to provide data storage and data access services.Access control in cloud storage,such as an extended data access control scheme for multi-authority cloud storage(NEDAC-MACS),is the cornerstone to ensure the security and privacy of data in cloud storage.This paper gave an attack method to demonstrate that a revoked user could still decrypt new ciphertexts in NEDAC-MACS and proposed a scheme to enhance the security of NEDAC-MACS,which could resist the collusion attack between cloud server and users.Finally,formal cryptanalysis and performance analysis show that the scheme can resist collusion attacks between unauthorized users and between cloud servers and users,and ensure forward security,backward security and data confidentiality.

关 键 词：访问控制 数据安全 合谋攻击 云存储 工业互联网 

分 类 号：TP309[自动化与计算机技术—计算机系统结构] TP391[自动化与计算机技术—计算机科学与技术]