Privacy protection method based on fuzzy grouping of trusted third-party attributes in cloud environment

Abstract

The invention relates to a privacy protection method based on trusted third party attribute fuzzy grouping under the cloud environment. The method comprises an attribute fuzzy grouping access control method and an interaction protocol based on trusted third party protection, and is mainly used for three stages of cloud user registration, cloud end data creation and cloud end data access, and the stages support direct interaction and indirect interaction. Through the access control method based on attribute fuzzy grouping, conversion of an access entity, an access control policy and user requests is achieved on the three stages by the trusted third party, leakage of privacy information of users can be effectively avoided, and authenticity of anonymous access users is ensured. Through the interaction protocol based on trusted third party protection, interaction behaviors of the user, the trusted third party and the cloud service party are stipulated, data encryption, timestamp and other technological means are added to the protocol, and safety of user data, user identities and attribute privacy is guaranteed in the interaction process of the user, the trusted third party and the cloud service party.

Description

technical field [0001] The invention belongs to the technical field of cloud computing security, and specifically relates to a data privacy protection method based on a trusted third party in a cloud environment. The method proposes two technologies: an access control method based on attribute fuzzy grouping and an interactive protocol based on trusted third party protection , which can not only ensure the security of data stored by cloud users, but also prevent the leakage of user identity and attribute privacy. Background technique [0002] Cloud computing has become one of the current research hotspots in the information field. By introducing a virtual layer between system software and hardware, it shields the dynamics, distribution, and heterogeneity of the hardware platform, and realizes the effective aggregation and reuse of underlying IT resources. , and provide dynamic, scalable large-scale computing and storage services to remote computer users in a simple and trans...

AI Technical Summary

Problems solved by technology

In addition, when a user remotely accesses cloud data, malicious cloud service providers or attackers can obtain the user's identity information by monitoring its operation, and then use this information to illegally read, maliciously tamper or destroy the user data, which will lead to Therefore, the issue of privacy protection has become the key to the sustainable development and wide application of cloud computing technology.

Although the existing privacy protection methods can solve the problem of user privacy protection in the cloud environment to a certain extent, most methods still require cloud users to provide attribute certificates for identity authentication before accessing data, which cannot meet the user's anonymous access needs. The problem of identity and attribute privacy disclosure

In addition, although some methods allow users to access the cloud anonymously, the anonymity also makes it difficult to determine the identity of the user accessing the cloud data, and there is a security risk of cloud privacy data leakage

Images