Data sharing system

Abstract

The invention discloses a data sharing method and system. The method comprises the following steps that: a plurality of secret key distribution center is constructed by using a unified common parameter; on the basis of the common parameter, each secret key distribution center generates an attribute public key corresponding to an attribute of a user; a corresponding secret key is generated based on a user attribute of a data visitor; a data sharer constructs an access strategy according to an access limit demand of shared data; encryption is carried out on the shared data by using an encryption secret key to generate a ciphertext; on the basis of the access strategy and the corresponding attribute public key, the encryption secret key is encrypted to generate a ciphertext public key; and the ciphertext is decrypted according to the ciphertext public key and a private key of the data visitor meeting the access strategy. Compared with the prior art, the safety performance of the system can be substantially improved with the method; and on the premise that safety is not reduced, the computational work of the method can be substantially reduced.

Description

Technical field [0001] The invention relates to the field of information technology, in particular to a data sharing method and system. Background technique [0002] With the continuous advancement of network technology, cloud storage services have been widely used. Through cloud storage services, users can easily store data to a remote server and share data with other users. Cloud storage services are very powerful, but they also bring new privacy and security challenges. After the user uploads the data, it is hosted on the server, and the control of the data is not in the control of the user. Therefore, data security and privacy are key issues that cloud storage needs to solve. [0003] In the prior art, one of the means for achieving secure access control of data in cloud storage is Ciphertext Policy Attribute-based Access Control. The ciphertext attribute access control strategy includes three parts: user, data, and key distribution center. among them: [0004] User: The us...

AI Technical Summary

Problems solved by technology

Due to the inefficient decryption and inflexibility of this method, most of the existing attribute-based access control schemes are not suitable for implementing distributed data sharing systems

[0009] In addition, the attribute encryption methods in the prior art all rely on a trusted key distribution center, resulting in the security of the entire system resting on a single key distribution center. If the key distribution server is attacked, the attacker is in charge of the key distribution center During the key distribution process, the keys of the entire system will be leaked, and data confidentiality cannot be guaranteed

Images