An access control method for an access control system of a cloud storage service platform

Abstract

The invention belongs to the field of cloud service information security and provides an access control method of an access control system of a cloud storage service platform. The system and method are based on the weight attribute encryption mechanism, adopt multi-organization attribute-based encryption technology, and store the encrypted data on the cloud storage service platform, which can improve the security of the cloud storage service. At the same time, due to the combination of attributes and weights, hierarchical management of user attributes is realized, so that users with the same attribute and different levels have different access rights, thus realizing more flexible and detailed access control. In addition, the system and method adopt multi-organization attribute-based encryption technology, which avoids the problem of excessive concentration of power of a single certification center, and further improves the security of data storage. The system and method are particularly suitable for deployment on the OSS platform, can effectively guarantee the confidentiality of user data stored on the OSS platform, and can implement fine-grained access control on the data sharing range.

Description

Technical field [0001] The invention belongs to the field of cloud service information security, and in particular relates to an access control method for an access control system of a cloud storage service platform. Background technique [0002] In the cloud storage service platform, due to the use of remote data hosting technology, the cloud service provider is the physical owner of the data, but is not in the same trust domain as the data owner. Cloud storage service providers manage multiple users and their resources. When users access other user resources across borders, they need to adopt certain access control strategies to control access to data and services. However, in practice, because the cloud storage service platform uses virtualized storage technology, the cloud storage service is loosely coupled with the underlying hardware environment, and there is no fixed security boundary between the data of different users, which increases the number of cloud storage The dif...

AI Technical Summary

Problems solved by technology

[0004] The purpose of the embodiments of the present invention is to provide an access control method for an access control system of a cloud storage service platform, which aims to solve the problem that the existing cloud storage service platform stores user data in plain text, and has poor privacy and security

Images