基于访问控制的密文检索系统的研究与实现

发布时间：2019-03-03 13:11

【摘要】：目前,云存储发展得十分迅速,相关技术也变得愈来愈成熟和完善,应用范围也变得越来越广泛。近些年来,越来越多的敏感信息和数据存储在云端上,一旦把敏感信息和数据上传到云端,用户便在很大程度上丧失了对这些数据的控制能力。另外,云服务提供商并不一定是完全可信的,因此云存储虽然带来了非常多方便的地方,但是也为这些存储在云端的数据埋下了安全的隐患。云存储中的数据隐私保护也早已成为了研究的热点。本文主要研究并解决存储在云端的数据的隐私保护等相关问题。首先从存储在云端的数据的访问控制着手,设计了一个策略细粒度化并且操作简单的访问控制方案,并且在一定程度上解决了离线授权的问题。然后针对存储在云端数据的检索困难,提出了一个基于多关键词排序的动态数据密文检索方案,在支持对动态数据检索的同时,也在准确率和检索速率有一定的提高,并且还保证了其安全性。具体工作内容如下:(1)对基于访问控制的密文检索系统进行了详细的研究和设计。此系统主要分为两个模块:访问控制模块和密文检索模块。首先对访问控制模块的业务逻辑进行研究设计,其中主要包括权限申请,权限授权,以及权限收回这三部分。然后再对密文检索模块进行业务逻辑的研究设计,此模块主要包括文档预处理和相关性计算排序,详细地阐述这两方面的流程和处理过程。(2)对基于访问控制的密文检索系统进行了编码实现。这个系统主要是基于Java Web的开源框架SSH和Luecene来实现的。访问控制模块是根据设计时指定些全局的标示符等来确认权限申请收回等操作,而密文检索则主要是基于Luecene这个检索工具和IK Analyzer分词编程完成。(3)对基于访问控制的密文检索系统进行了比较详细的测试。测试分为两部分进行。第一部分主要是对于该系统的权限申请和收回等操作进行测试,选取一定数量的用户进行不同的操作得到测试结果。第二部分是针对云端上不同数量的文档,相同的检索条件进行测试,测试检索的速率,准确率等等。本文针对存储在云端的数据设计实现的基于访问控制的密文检索系统,首先通过存储在云端的数据的访问进行控制,在一定程度上防止了数据泄露和窃取,保护了数据的隐私。另外密文检索功能为用户在使用存储在云端的数据的时候,更安全,更快速并且更准确地找到用户所需的数据。
[Abstract]:At present, cloud storage is developing rapidly, the related technology has become more and more mature and perfect, and the scope of application has become more and more extensive. In recent years, more and more sensitive information and data are stored in the cloud. Once the sensitive information and data are uploaded to the cloud, users will lose the ability to control the data to a great extent. In addition, cloud service providers are not necessarily completely trusted, so cloud storage brings a lot of convenience, but it also buries the security of the data stored in the cloud. The data privacy protection in cloud storage has already become the research hotspot. This paper mainly studies and solves the privacy protection of data stored in the cloud. Starting with the access control of the data stored in the cloud, this paper designs an access control scheme with fine-grained policy and simple operation, and solves the problem of off-line authorization to a certain extent. Then, aiming at the difficulty of searching the data stored in the cloud, this paper proposes a dynamic data ciphertext retrieval scheme based on multi-keyword sorting, which not only supports the dynamic data retrieval, but also improves the accuracy and retrieval rate to a certain extent. It also ensures its safety. The main contents are as follows: (1) the access control-based ciphertext retrieval system is studied and designed in detail. The system is divided into two modules: access control module and ciphertext retrieval module. Firstly, the business logic of access control module is researched and designed, which includes three parts: permission application, authority authorization, and authority withdrawal. Then the business logic of ciphertext retrieval module is researched and designed. This module mainly includes pre-processing of documents and sorting of correlation calculation. The processes and processing processes of these two aspects are described in detail. (2) an access control-based ciphertext retrieval system is coded and implemented. This system is mainly based on Java Web open source framework SSH and Luecene to implement. The access control module is based on the design time to specify some global identifiers, etc., to confirm the permission claim retraction and other actions, and so on. Ciphertext retrieval is mainly based on Luecene, a retrieval tool and IK Analyzer participle programming. (3) the access control-based ciphertext retrieval system is tested in detail. The test is divided into two parts. The first part is to test the operation of the system, such as permission application and recall, and select a certain number of users for different operations to get the test results. In the second part, according to the different number of documents on the cloud, the same retrieval conditions are tested, the speed and accuracy of retrieval are tested, and so on. In this paper, a ciphertext retrieval system based on access control is designed and implemented for the data stored in the cloud. Firstly, the access to the data stored in the cloud is controlled to prevent data leakage and theft to a certain extent, and to protect the privacy of the data. In addition, ciphertext retrieval function is more secure, faster and more accurate for users to find the data they need when they use the data stored in the cloud.
【学位授予单位】：北京邮电大学
【学位级别】：硕士
【学位授予年份】：2016
【分类号】：TP309;TP391.3

【相似文献】