Encryption method for realizing support of FGAC (Fine Grained Access Control)

Abstract

The invention relates to an encryption method for realizing support of FGAC (Fine Grained Access Control), wherein an access control structure is an access control tree in an attribute-based encryption system, extended attribute nodes are represented by using a range of k being less than 0, and k represents an operation identifier corresponding to a specific operation (or function); leaf nodes ofk being less than 0 are called extended attribute leaf nodes, and subnodes of the extended attribute leaf nodes include one or more attributes and attribute value pairs. The data in the subnodes are input parameters needed by the operation function corresponding to the operation identifier k. The output of the function corresponds to the attribute values of the extended attribute nodes, and an extended operation comprises a matching function and a logical operator. The encryption method leads an attribute-based encryption algorithm to support abundant operations, and facilitates a flexible FGAC capability of the improved attribute-based encryption algorithm.

Description

technical field [0001] The invention relates to a flexible and fine-grained access control method proposed in a distributed environment, aiming at the requirements of file sharing and safe storage. The fine-grained access control method is mainly realized by extending the extension tree of the original attribute-based encryption algorithm. access control. Background technique [0002] In a distributed environment, especially in the cloud computing service model, after the user data is centralized, ensure that the internal security management and access control mechanism of the operation service provider meets the user's security needs, and avoid the coexistence of multiple users in the distributed environment or The potential risks posed by shared data are security challenges faced in a distributed environment. [0003] Currently, data centers protect data mainly through two methods: access control and encryption. Commonly used access control methods include discretionary ...

AI Technical Summary

Problems solved by technology

However, conventional encryption technologies, including symmetric encryption technology and public key encryption technology, can only encrypt files monotonously. In a distributed environment, the distribution and management of keys is more complicated, and the flexible control of access control technology cannot be realized. Function

The recently proposed attribute-based encryption system (ABE) can realize access control based on encryption algorithm, key management and key distribution mechanism without load, but attribute-based encryption algorithm can only support AND, OR and threshold operation, and cannot realize detailed Granular access control and poor scalability

Images