基于属性加密算法的云存储研究

发布时间：2018-06-18 02:03

本文选题：属性加密 + 策略更新　；参考：《深圳大学》2017年硕士论文

【摘要】：因云计算的经济性,越来越多的个人和企业开始将数据的存储和平台的搭建交付给云端,同时,受益于云计算的海量存储空间和高并发的计算能力,大数据与云平台的结合日益普遍,这对云计算提出了崭新的安全需求,而以往的访问控制技术存在高耗低效、难以管理等问题。基于属性加密技术是解决云存储系统安全问题的有效方法。在基于属性加密机制中,用户由若干属性标识,且密钥和密文由一组属性表示。加密者指定解密的群体,而不是单个客体。从而基于属性加密机制能够有效降低数据冗余、减轻管理者的负担,用户能够自主灵活控制数据的访问,同时保证数据的隐私和安全。本文主要研究基于属性加密机制,详述不同类型的基于属性加密算法;分析业界现有的基于属性加密算法和策略更新机制;提出新的基于属性加密方案。本文主要贡献有:1.提出单授权机构的密文策略基于属性加密方案,在保证计算效率的同时,改进了密文策略基于属性加密中存储开销大和通信开销高的问题,并引入了策略更新外包功能。通过将方案规约到一般群模型和随机预言模型,证明了该方案的安全性。2.提出多授权机构的密文策略基于属性加密方案,改进了策略更新的计算效率低和存储消耗高等问题,并引入了加密外包和解密外包功能,使系统适用于资源受限的设备。同时通过将方案规约到判定性子群问题,证明了该方案的安全性。
[Abstract]:Because of the economy of cloud computing, more and more individuals and enterprises begin to deliver data storage and platform building to the cloud, at the same time, they benefit from the massive storage space and high concurrent computing power of cloud computing. The combination of big data and cloud platform is becoming more and more common, which puts forward a new security requirement for cloud computing. However, access control technology in the past has many problems, such as high consumption and low efficiency, difficult to manage and so on. Attribute-based encryption is an effective method to solve the security problem of cloud storage system. In the attribution-based encryption mechanism, the user is identified by several attributes, and the key and ciphertext are represented by a set of attributes. The encryptor specifies the decrypted group, not a single object. So the attribute encryption mechanism can effectively reduce the data redundancy, reduce the burden on managers, users can control the access of data independently and flexibly, and ensure the privacy and security of data at the same time. This paper mainly studies the attribute based encryption mechanism, describes different types of attribute based encryption algorithms, analyzes the existing attribute based encryption algorithms and policy updating mechanisms, and proposes a new attribute based encryption scheme. The main contributions of this paper are: 1. This paper proposes an attribute based ciphertext encryption scheme for single authorization mechanism, which not only ensures the efficiency of computing, but also improves the problems of high storage cost and high communication cost in attribute based ciphertext encryption, and introduces the outsourcing function of policy updating. The security of the scheme is proved by reducing the scheme to general group model and stochastic prediction model. In this paper, an attribute based encryption scheme for multi-authorization mechanism is proposed, which improves the low efficiency and high storage consumption of policy update, and introduces the functions of encryption outsourcing and decryption outsourcing, which makes the system suitable for devices with limited resources. At the same time, the security of the scheme is proved by regulating the scheme to the decision subgroup problem.
【学位授予单位】：深圳大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP309;TP333

【相似文献】