A cloud storage ciphertext access control system and method based on table attributes

Abstract

The invention belongs to the technical field of cloud storage services, and provides a cloud storage ciphertext access control system and an access control method based on table attributes. In the system and method, during the encryption process, the data owner classifies each leaf node according to whether the threshold value of the parent node corresponding to each leaf node on the access structure tree is 1, and further classifies each leaf node according to the type of the parent node, Classify the set of leaf nodes whose parent node threshold is 1, and then encrypt the data according to the classification result and upload it to the cloud. In this way, the length of the ciphertext obtained by the data owner, the amount of encryption calculations, and the amount of decryption calculations of the subsequent shared users are only related to the attribute set whose parent node threshold is not 1. In the access structure tree, the threshold value of 1 corresponds to the OR gate. Otherwise, it corresponds to an AND gate. Therefore, it can be said that the system overhead is only related to the attribute set whose parent node is an AND gate. When the OR gate in the access structure tree increases, the calculation cost and communication overhead of the system will be greatly reduced.

Description

technical field [0001] The invention belongs to the technical field of cloud storage services, and in particular relates to a cloud storage ciphertext access control system based on table attributes. Background technique [0002] In the cloud storage service platform, due to the use of remote data hosting technology, the cloud storage service provider is the physical owner of the data, but it is not in the same trust domain as the data owner. Cloud storage service providers manage multiple users and their resources. When users access other user resources across borders, they need to adopt certain access control policies to control access to data and services. But in reality, since the cloud storage service platform adopts virtualized storage technology, the cloud storage service is loosely coupled with the underlying hardware environment, and there is no fixed security boundary between the data of different users, which increases the Difficulty in implementing access contro...

AI Technical Summary

Problems solved by technology

[0006] The purpose of the present invention is to provide a cloud storage ciphertext access control system based on table attributes, aiming at solving the problem of deploying attributes and access policies through tables in the existing cloud storage platform adopting the CP-ABE scheme, due to the huge set of attributes and complex access structure , making the execution efficiency of the CP-ABE scheme low

Images