云环境下基于属性的用户权限管理研究

发布时间：2019-02-28 19:39

【摘要】：用户权限分配是云计算服务的重要难题之一,提出了一种基于属性的用户权限管理方案。该方案以云服务中的新用户密钥分配为研究对象,论述了多方协同的用户签名验证解密管理机制,数据所有者和授权者共同选择属性集,数据所有者基于属性集定义密文访问结构,从而用户只有通过授权者认证才能获得解密密钥,达到用户权限升级与降级同步管理的目的。另外,本方案以群属性集更新为中心设计CP-ABE群签名验证机制,令数据所有者、用户和授权者组成群;基于群和自身属性用户可对消息签名以及公开验证,用以保护密文数据的细粒度访问控制。最后,给出签名有效性和不可伪造的证明结果。
[Abstract]:User rights assignment is one of the most important problems in cloud computing services. This paper proposes an attribute-based user rights management scheme. This scheme takes the new user key distribution in cloud service as the research object, discusses the multi-party cooperative management mechanism of user signature verification and decryption, and the data owner and the licensor choose the attribute set together. The data owner defines the ciphertext access structure based on the attribute set, so that the user can obtain the decryption key only through the authentication of the authority, and achieve the purpose of synchronous management of user privilege upgrade and demotion. In addition, this scheme designs the CP-ABE group signature verification mechanism based on the update of the group attribute set, which makes the data owner, user and authority make up the group. Group-and self-attribute-based users can sign and publicly verify messages to protect fine-grained access control of ciphertext data. Finally, the validity of signature and the proof result of non-forgery are given.
【作者单位】：武汉大学空天信息安全与可信计算教育部重点实验室;武汉大学计算机学院;河南财政税务高等专科学校;
【基金】：国家自然科学基金(61373168,61202387) 教育部高等学校博士学科点专项科研基金(20120141110002) 河南省软科学研究计划(132400410905,132400410979,142400410270)资助
【分类号】：TN918.4

【相似文献】