云计算中属性基数据与权限混合访问控制方案  

Attribute-Based Data and Privilege Hybrid Access Control Scheme in Cloud Computing

作　　者：刘芹 李鹏举 余纯武[2] LIU Qin;LI Pengju;YU Chunwu(School of Cyber Science and Engineering,Wuhan University,Wuhan 430079,China;School of Computer Science,Wuhan University,Wuhan 430079,China)

机构地区：[1]武汉大学国家网络安全学院,武汉430079 [2]武汉大学计算机学院,武汉430079

出　　处：《计算机工程与应用》2024年第13期276-286,共11页Computer Engineering and Applications

基　　金：国家自然科学基金(62272348)。

摘　　要：云计算的出现使得从任何位置访问应用程序和数据成为可能,由于其灵活、高效和资源共享的特性,云计算迅速应用于各个行业和领域。云计算中的安全细粒度数据访问控制、隐私保护和权限控制已成为学术界和工业界研究的热点问题。为了解决这些问题,提出一种基于SM9属性加密的数据与权限混合访问控制方案,在需要加密大量具有层次结构的数据的场景下,该方案比传统的属性基加密方案更加灵活高效,匿名的特点可以限制用户隐私泄露,层次权限控制使得更细粒度地管理云数据的操作权限成为可能。安全分析和实验结果表明,该方案在判定性双线性Diffie-Hellman假设下是安全的,在加解密等方面具有良好的工作效率。The emergence of cloud computing has made it possible to access applications and data from anywhere.Due to its flexibility,efficiency,and resource sharing capabilities,cloud computing has been rapidly applied to various industries and fields.Fine-grained data access control,privacy protection,and privilege control in cloud computing have become hot research issues in both academia and industry.To address these issues,this paper proposes a data and privilege hybrid access control scheme based on SM9 attribute encryption.In scenarios that require encryption of a large amount of hierarchical data,this scheme is more flexible and efficient than traditional attribute-based encryption schemes,the anonymity of it can reduce the leakage of user’s privacy,and hierarchical privilege control makes it possible to manage the operation privilege of cloud data more finely.The security analysis and simulation experiments show that,the proposed scheme is secure under decisional bilinear Diffie-Hellman assumption,and it is efficient in encryption and decryption.

关 键 词：匿名 层次数据 权限控制 SM9 属性基加密 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]