Method for cloud data confidentiality protection and access control

Abstract

The invention discloses a method for cloud data confidentiality protection and access control. The method includes the specific implementation processes: adopting a symmetric cryptosystem correlation algorithm for realizing encryption of sensitive data, and storing the data in a cloud server in an encrypted form; and adopting a ciphertext-policy attribute-based encryption mechanism to realize protection of a data encryption key. An encrypted access policy can be formulated by a data owner as required, and only the data user satisfying conditions of the access policy can access to the encrypted sensitive data by decryption. Compared with the prior art, the method has the advantages that security of the data in a cloud storage system under the open environment is guaranteed under the premise that a cloud server provider is untrusted, security sharing of the sensitive data is realized, and huge computation overhead brought to the data owner by key distribution and data management can be reduced.

Description

technical field [0001] The invention relates to the technical field of computer information security, in particular to a method with strong practicability, cloud data confidentiality protection and access control. Background technique [0002] Cloud computing is a new type of computing model following distributed computing, grid computing, and peer-to-peer computing. It focuses on resource leasing, application hosting, and service outsourcing, and has quickly become a hot spot in the development of computer technology. In the cloud computing environment, the concept of on-demand services in the IT field has been truly reflected. By integrating distributed resources, cloud computing builds a computing environment that responds to multiple service requirements, meets user customization requirements, and can access its corresponding service resources through the network. While improving the efficiency of use, cloud computing brings great impact and challenges to the realizatio...

AI Technical Summary

Problems solved by technology

However, when the attributes of this type of scheme are revoked, the data owner DO (Data Owner) needs to generate ciphertext re-encryption information and re-encrypt the relevant ciphertext; due to ciphertext re-encryption, the old key of the user with permission cannot decrypt For ciphertext, DO needs to generate key upgrade information and send it to the user for upgrade; these operations will increase the amount of DO calculation

At the same time, the user will be affected by the revocation of attributes of other users, which will increase the computational burden of the user

During the period of multiple attribute revocation, there may be no or only a small number of file updates. On the premise that the file is not updated and no re-encryption is required, it can be considered that doing so will increase the calculation and communication consumption of attribute authority and CSP in vain.

[0007] At present, cloud computing still does not have a sufficiently secure solution for access control

Images