一种改进的云存储平台权限管理机制设计

发布时间：2018-11-07 11:49

【摘要】：针对云存储服务中用户访问权限撤销计算与带宽代价过大、复杂度过高等问题,以密文策略的属性加密体制(CP-ABE)的密文访问控制方案作为理论背景,设计出一种基于动态重加密的云存储权限撤销优化机制,即DR-PRO。该机制利用(k,n)门限方案,将数据信息划分成若干块,动态地选取某一数据信息块实现重加密,依次通过数据划分、重构、传输、提取以及权限撤销等子算法完成用户访问权限撤销实现过程。通过理论分析与模拟实验评估表明,在保证云存储服务用户数据高安全性的前提下,DR-PRO机制有效降低了用户访问权限撤销的计算与带宽代价,其性能效率得到了进一步优化与提高。
[Abstract]:In order to solve the problems of excessive cost and complexity of user access revocation and bandwidth in cloud storage service, a ciphertext access control scheme based on attribute encryption (CP-ABE) of ciphertext policy is used as the theoretical background. This paper designs an optimized mechanism of cloud storage privilege revocation based on dynamic reencryption, that is, DR-PRO. In this mechanism, the data information is divided into several blocks by using the (KN) threshold scheme, and a certain block of data information is dynamically selected to realize reencryption, and then the data is partitioned, reconstructed and transmitted in turn. The extraction and revocation algorithms complete the implementation of user access revocation. The theoretical analysis and simulation results show that the DR-PRO mechanism can effectively reduce the cost of computing and bandwidth of user access revocation under the premise of high security of cloud storage service user data. Its performance efficiency has been further optimized and improved.
【作者单位】：重庆师范大学数学与计算机科学学院;重庆师范大学数学学院;
【基金】：国家自然科学基金(No.61302180,No.11401065) 中国博士后基金资助项目(No.2013M540698,No.2014T70854) 重庆市教委自然科学基金(No.KJ120624,No.KJ130606) 重庆市自然科学基金(No.cstc2014jcyj A00003) 重庆师范大学重点项目基金(No.2011XLZ05)
【分类号】：TP333;TP309

【参考文献】