An access control system and an access control method thereof oriented towards a cloud storage service platform

Abstract

The invention belongs to the technical field of cloud storage service, and provides an access control system and an access control method thereof oriented towards a cloud storage service platform. In the method and the system, an authorization center and data owners are based on a weight attribute encryption mechanism. User data which needs to be uploaded is encrypted and then stored in the cloud storage service platform, so that effective privacy protection of shared data on the cloud storage service platform can be effectively realized and the security of cloud storage service is raised. Meanwhile, since attributes of users are combined with weights, grading management of the user attributes is realized, and users with the same attribute and different grades are enabled to have different access authorities. Furthermore, the authorization center and the data owners respectively generate parts of ciphertexts. User access authority is controlled through the ciphertext of the control center. Access control strategies are made through the ciphertext of the data owners. When the attributes of the users change, real time cancelling of the user access authority can be realized through updating of the ciphertext of the authorization center.

Description

technical field [0001] The invention belongs to the technical field of cloud storage services, and in particular relates to an access control system and an access control method for a cloud storage service platform, especially an Amazon S3 cloud storage service platform. Background technique [0002] In the cloud storage service platform, due to the adoption of data remote hosting technology, the cloud storage service provider is the physical owner of the data, and is not in the same trust domain as the data owner. Cloud storage service providers manage multiple users and their resources. When users access other user resources across borders, they need to adopt certain access control policies to control access to data and services. But in reality, since the cloud storage service platform adopts virtualized storage technology, the cloud storage service is loosely coupled with the underlying hardware environment, and there is no fixed security boundary between the data of diff...

AI Technical Summary

Problems solved by technology

[0004] The purpose of the embodiments of the present invention is to provide an access control system oriented to cloud storage service platforms, aiming to solve the problem that the existing cloud storage service platforms store user data in plain text and have poor privacy and security

Images