面向移动云服务的分级访问控制的认证协议  

An Authentication Protocol with Hierarchical Access Control for Mobile Cloud Services

作　　者：王捷 李晶 罗影 WANG Jie;LI Jing;LUO Ying(Energy Internet Technology Center,State Grid Hubei Electric Power Co.,Ltd.,Wuhan 430077,Hubei,China;Internet Department,State Grid Hubei Electric Power Co.,Ltd.,Wuhan 430077,Hubei,China;Technical Research Department,Industrial Information Security(Sichuan)Innovation Center Co.,Ltd.,Chengdu 610059,Sichuan,China)

机构地区：[1]国网湖北省电力有限公司能源互联网技术中心,湖北武汉430077 [2]国网湖北省电力有限公司互联网部,湖北武汉430077 [3]工业信息安全(四川)创新中心有限公司技术研究部,成都四川610059

出　　处：《应用科学学报》2022年第6期1006-1018,共13页Journal of Applied Sciences

基　　金：国家自然科学基金(No.61902085)资助。

摘　　要：针对移动云计算服务环境中终端设备资源有限的问题,在现有支持分级访问的认证协议基础上,基于签密技术和多服务器认证技术设计了一个高效的、具有分级访问控制和隐私保护的认证协议。新协议支持单点注册,认证过程无需与可信第三方通信,且移动终端未使用计算复杂度高的双线性对运算。性能分析结果显示,与现有的具有分级访问的认证协议相比,该改进协议在移动终端的计算效率提升约34%,提高了云服务的访问效率,具有一定的实用价值。In order to resolve the problem of limited resources of mobile terminal devices in mobile computing services environment,an improved privacy-preserving authentication scheme with hierarchical access control is proposed based on signcryption technology and multi-server authentication technology.Users can access multiple mobile cloud service providers by only registering arbitrary one of them,and the authentication process does not require the participation of a trusted third party.Besides,mobile terminals do not use the bilinear pairing operation to avoid high computational complexity.Performance analysis results show that the computing efficiency of the proposed scheme in mobile terminals can be improved by about 34%compared with the existing related schemes,providing practical value in improving the access efficiency of cloud services.

关 键 词：移动云服务 认证 访问控制 隐私 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]