支持多用户协同编辑的云存储访问控制方法

发布时间：2018-05-11 12:06

本文选题：云存储 + 访问控制　；参考：《计算机研究与发展》2017年07期

【摘要】：以往的云存储属性基访问控制研究大多数是对外包数据的读权限进行控制,很少考虑多个用户协同编辑云端同一个外包数据时的写权限控制.多用户协同编辑控制存在挑战:1)资源有限的数据拥有者希望云辅助自己对外包数据的写权限进行控制,但不希望云获得数据内容,也不希望云感知匹配内容,甚至不希望云能够预测用户的写权限;2)布尔公式的访问结构无法表达写权限控制策略;3)双线性映射运算计算代价大,不适合多用户协同编辑控制.提出一个支持多用户协同编辑的云存储访问控制方法:数据拥有者采用表达能力更丰富的circuit定义写权限访问控制策略,委托半可信云采用矩阵运算快速判断用户提交的修改数据是否应该接受,并且云不可预测每个用户是否具有写权限.分析与实验表明:该方法具有多用户协同编辑的访问控制能力,并且在读权限控制时,利用云辅助解密方法使得用户端存储量和加解密计算量是较小的.
[Abstract]:Most of the previous research on attribute base access control of cloud storage is to control the read rights of the outsourced data, and rarely consider the write rights control when multiple users work together to edit the same outsourced data in the cloud. Multi-user collaborative editing control has a challenge: 1) data owners with limited resources want the cloud to assist them in controlling the write rights of the outsourced data, but they do not want the cloud to obtain data content, nor do they want the cloud to perceive matching content. It is not even hoped that the access structure of the Boolean formula which can not predict the user's write permission can not express the write permission control strategy. The bilinear mapping algorithm is expensive to compute and is not suitable for multi-user cooperative editing control. This paper proposes a cloud storage access control method which supports multi-user collaborative editing. Data owners define write access control policies with more expressive circuit. The trust semi-trusted cloud uses matrix operation to quickly determine whether the modified data submitted by the user should be accepted, and the cloud can not predict whether each user has write permission or not. The analysis and experiments show that the method has the ability of multi-user co-editing access control, and in the control of read rights, the cloud assisted decryption method is used to reduce the amount of memory and computation of encryption and decryption.
【作者单位】：武汉大学计算机学院;九江学院;
【基金】：国家自然科学基金项目(61373040,61572370)~~
【分类号】：TP309

【参考文献】