云端数据访问控制中基于中间代理的用户撤销新方法

发布时间：2018-12-06 13:27

【摘要】：基于属性的加密机制是云端大数据细粒度访问控制的重要方法,其中的用户撤销是访问控制的重要一环,但现有的用户撤销方法因为仅仅重新加密对称密钥或者需要重新加密原始数据,所以存在安全性差或效率低的问题。针对上述问题,提出了一种基于中间代理的用户撤销方法,来解决在细粒度访问控制环境下用户撤销所带来的安全和效率问题。该用户撤销方法主要思想是利用中间代理辅助处理原始密文,继而由用户完成转化后密文的解密。由于用户没有单独解密密文的能力,因此不需要重新加密共享数据,从而在用户撤销后保证了数据的安全性,又解决了效率问题。理论分析以及实验结果表明,所提出的方法相较现有方法能够在细粒度访问控制环境下达到安全且高效的用户撤销。
[Abstract]:The attribute-based encryption mechanism is an important method of fine-grained access control for cloud big data, in which user revocation is an important part of access control. However, the existing user revocation methods only re-encrypt the symmetric key or need to re-encrypt the original data, so they have the problem of low security and low efficiency. Aiming at the above problems, a user revocation method based on intermediate agent is proposed to solve the security and efficiency problems caused by user revocation in fine-grained access control environment. The main idea of this method is to use the intermediate agent to process the original ciphertext, and then to decrypt the transformed ciphertext by the user. Since the user does not have the ability to decrypt the ciphertext separately, it is not necessary to re-encrypt the shared data, which ensures the security of the data and solves the problem of efficiency. Theoretical analysis and experimental results show that the proposed method can achieve secure and efficient user revocation in fine-grained access control environment.
【作者单位】：西安电子科技大学计算机学院;
【基金】：国家自然科学基金资助项目(61170251) 国家自然科学基金委—广东联合基金资助项目(U1401251) 国家高技术研究发展计划(“863”计划)基金资助项目(2012AA013102) 教育部重点基金资助项目(209156)~~
【分类号】：TP393.08

【相似文献】