基于密文策略属性基加密的云存储数据多权限访问控制算法  

A Multi-permission Access Control Algorithm for Cloud Storage Data Based on Ciphertext Policy Attribute-based Encryption

作　　者：高斐然 GAO Feiran(The Department of General Education,Shaanxi Vocational Academy of Art,Xi’an 710061,China)

机构地区：[1]陕西艺术职业学院,基础教学部,陕西西安710061

出　　处：《微型电脑应用》2025年第1期238-242,共5页Microcomputer Applications

摘　　要：因云存储的大数据属性,其安全性和隐私性面临严峻挑战,访问权限的控制过程开销较大。为了应对这些问题,提出基于密文策略属性基加密的云存储数据多权限访问控制算法,以提高云存储系统的安全性和效率。分析密文策略属性基加密的双线性对、访问结构和困难假设,利用密文策略属性基加密加密和解密处理云存储数据,提高云存储数据的安全性;对云服务器与用户之间展开询问—应答、身份验证和访问控制,实现对用户数据访问控制权限。实验结果表明:所提算法控制下,当用户数量增加至200个时,通信代价仅小于10 bit,占用存储空间一直小于5 MB;同时该方法可以有效平衡用户私钥生成时间与用户属性数量间的关系,在加密和解密过程中有效地控制了时间开销。Due to the big data attributes of cloud storage,data security and privacy are facing severe challenges,and the cost of access control process is large.To solve these problems,a multi-permission control algorithm for cloud storage data based on ciphertext policy attribute-based encryption is proposed to improve the security and efficiency of the cloud storage system.This paper analyzes bilinear pairs,access structure and difficult assumptions of ciphertext policy attribute-based encryption,and uses ciphertext policy attribute-based encryption to encrypt and decrypt cloud storage data to improve the security of cloud storage data.Query-answer,authentication and access control are performed between the cloud server and the user to achieve the user data access control permission.The experimental results show that under the control of the proposed method,when the number of users increases to 200,the communication cost is only less than 10 bit,and the storage space is always less than 5 MB.At the same time,the method can effectively balance the relationship between the generation time of the users’private key and the number of user attributes,and effectively control the time cost in the process of encryption and decryption.

关 键 词：椭圆曲线 多权限访问控制 属性基加密 云存储数据 

分 类 号：TP363[自动化与计算机技术—计算机系统结构]