基于服务商再加密机制的DaaS访问控制方案
发布时间：2019-06-19 13:47
【摘要】：为增强DaaS的隐私保护,给出了DaaS中数据隐私的定义并将其作为授权的基本单位,基于数据隐私定义对关系数据表进行了形式化定义,基于DaaS服务框架提出了一种基于双线性映射的DaaS提供商再加密机制,将该机制与访问控制策略结合,设计了DaaS下保护隐私的访问控制方案,并分析了该方案的正确性与安全性。新方案不仅实现了服务提供者对委托密文数据细粒度、灵活的访问控制管理,还可有效地防止用户与服务提供商的合谋攻击。
[Abstract]:In order to enhance the privacy protection of DaaS, the definition of data privacy in DaaS is given and regarded as the basic unit of authorization. Based on the definition of data privacy, the relational data table is formalized. Based on the DaaS service framework, a DaaS provider reencryption mechanism based on bilinear mapping is proposed. Combining this mechanism with access control strategy, an access control scheme to protect privacy under DaaS is designed. The correctness and security of the scheme are analyzed. The new scheme not only realizes the fine granularity and flexible access control management of entrusted ciphertext data by service providers, but also effectively prevents collusion attacks between users and service providers.
【作者单位】： 广东药学院信息工程学院;华南理工大学计算机学院;
【基金】：广东省医学基金项目(A2012295) 国家自然科学基金项目(65073145) 广东省战略性新兴产业核心攻关基金项目(2012A010701005) 广东省计算机网络重点实验室开放基金项目(CCNL201105)
【分类号】：TP393.08
[Abstract]:In order to enhance the privacy protection of DaaS, the definition of data privacy in DaaS is given and regarded as the basic unit of authorization. Based on the definition of data privacy, the relational data table is formalized. Based on the DaaS service framework, a DaaS provider reencryption mechanism based on bilinear mapping is proposed. Combining this mechanism with access control strategy, an access control scheme to protect privacy under DaaS is designed. The correctness and security of the scheme are analyzed. The new scheme not only realizes the fine granularity and flexible access control management of entrusted ciphertext data by service providers, but also effectively prevents collusion attacks between users and service providers.
【作者单位】： 广东药学院信息工程学院;华南理工大学计算机学院;
【基金】：广东省医学基金项目(A2012295) 国家自然科学基金项目(65073145) 广东省战略性新兴产业核心攻关基金项目(2012A010701005) 广东省计算机网络重点实验室开放基金项目(CCNL201105)
【分类号】：TP393.08
【相似文献】
相关期刊论文 前10条
1 钱继安;蒋兴浩;孙锬锋;;基于隐私本体的个性化访问控制模型[J];信息安全与通信保密;2011年02期
2 房秉毅;张云勇;徐雷;蓝天;;云计算应用模式下移动互联网安全分析[J];电信技术;2011年10期
3 韩伟力;高s，
本文编号：2502386
本文链接：https://www.wllwen.com/guanlilunwen/ydhl/2502386.html
