社交网络中具有可传递性的细粒度访问控制方案

发布时间：2018-10-31 18:19

【摘要】：针对社交网络中隐私保护的需求,基于属性基加密(ABE)算法,提出了一种权限可传递性的细粒度访问控制方案。在方案中通过属性的设置实现了社交网络成员不同粒度的刻画,为细粒度加密和访问提供了基础;同时在方案中引入了代理服务器,对非授权成员与授权成员之间的关系进行分析,从而判定非授权成员的访问权限。若该成员可以获得访问权限,密钥生成中心依据授权成员的属性为其生成解密密钥,进而实现访问权限的传递性。与其他基于访问控制或加密技术的隐私保护方案相比,所提方案将对数据的访问控制和加密保护相统一,在实现数据加密的同时,提供细粒度的访问控制;并结合社交网络的特点实现了访问权限的传递性。
[Abstract]:Aiming at the need of privacy protection in social networks, a fine-grained access control scheme based on attribute-base encryption (ABE) is proposed. In the scheme, the different granularity of the members of social network is realized by setting the attributes, which provides the foundation for fine-grained encryption and access. At the same time, the proxy server is introduced into the scheme to analyze the relationship between unauthorized members and authorized members, so as to determine the access rights of unauthorized members. If the member can obtain access rights, the key generation center generates the decryption key for the authorized member according to the properties of the authorized member, thus realizing the transitivity of access rights. Compared with other privacy protection schemes based on access control or encryption technology, the proposed scheme unifies data access control and encryption protection, and provides fine-grained access control while implementing data encryption. Combined with the characteristics of social networks, the transitivity of access rights is realized.
【作者单位】：哈尔滨工程大学计算机与科学技术学院;网络与数据安全四川省重点实验室(电子科技大学);
【基金】：国家自然科学基金资助项目(61170241) 网络与数据安全四川省重点实验室开放课题(201107) 黑龙江省教育厅科学技术研究项目(12513049)
【分类号】：TP393.08

【参考文献】