File Access and Modification Authority Control Method Based on Data Sharing

Abstract

The invention discloses a data sharing based file access and permission change control method. The data sharing based file access and permission change control method mainly solved the problem that the prior art is low in access efficiency, complicated in computation and is not applicable to file modification of users and comprises the achieving steps that 1 a data owner conducts classification processing on data files according to attributes and performs encryption and uploading; 2 the users access classified files according to the demands and a cloud server returns corresponding files to the users; 3 an authorization center synthesizes aggregate secret keys and transmits the aggregate secret keys to the users, and the users use the aggregate secret keys to decrypt encryption files; 4 the users modify the accessed files, encrypt the modified files, attach signatures to the modified files and upload the modified files; 5 the cloud server conducts attribute based signature verification on the users, stores the files if verification succeeds, otherwise abandons the files if the verification does not succeed. The data sharing based file access and permission change control method has the advantages of being high in read-write performance and efficiency, low in computing complex and reliable in storage and can be used for data sharing and access control based on privacy protection in a cloud computing environment.

Description

technical field [0001] The invention belongs to the field of information security, in particular to a permission control method for users to access and modify data files in a cloud computing environment, which can be used for data sharing and access control based on privacy protection in the cloud computing environment. Background technique [0002] With the rapid development of computer technology, the application of cloud computing is becoming more and more extensive. For enterprise users, especially small and medium-sized enterprises with insufficient financial capacity, cloud computing services allow them to meet their own management needs without purchasing expensive hardware facilities. Enterprises only need to pay cheap service fees to cloud service providers to enjoy the cloud computing platform provided by cloud service providers and obtain more flexible on-demand services, thereby reducing enterprise budget expenses. [0003] Although cloud computing brings such g...

AI Technical Summary

Problems solved by technology

However, in the cloud computing environment, the storage server is not trustworthy, it may steal the user's private data alone or collude with the attacker to sell the user's data files

So these access control schemes cannot ensure the safe sharing of data files

In the fourth access control scheme, the user's access to data files is determined by the data owner, and no longer completely depends on the credibility of the cloud storage server

However, this solution is only suitable for read access to data files, not for users modifying data files

Moreover, whether it is the construction of the access control tree or the revocation of attributes and users, it will bring great computational complexity.

Images