Access control method and system for object cloud storage

Abstract

The invention discloses an access control method and system for object cloud storage. According to the method, data is stored at a cloud side in object storage structure, and the uploading and downloading of a file object are realized at a client side; when a server receives a request, the security level and security category of the request user are extracted, and the security levels and security categories of the user and the object file are judged through the mandatory access control method. The method and system can conveniently provide services for various clients and mobile terminals. As the two attributes, i.e. the security level and security category, are taken into consideration for the access control policy, the security of the object data is greatly improved. The method and system are capable of supporting the storage of large data volume, and effectively protecting the data privacy.

Description

technical field [0001] The invention belongs to the field of information security, and in particular relates to a method and system for realizing access control to media resource files in a cloud storage environment. Background technique [0002] The rapid development of cloud computing has changed people's understanding of traditional infrastructure services and data storage. Because cloud computing can reduce the cost of storage and computing, cloud storage services are increasingly trusted by enterprises and individuals. However, the use of cloud storage will bring serious security threats to important data. When unauthorized access touches the data, it will affect the confidentiality and integrity of the data. [0003] The following two patents are related to cloud storage control technology: [0004] Chinese invention patent application CN201310071664.2 discloses an attribute-based cloud storage access control system, which realizes the verification by decrypting and ...

AI Technical Summary

Problems solved by technology

But at present, their access control schemes all adopt DAC (Discretionary Access Control, autonomous access control) and RBAC (RoleBased Access Control, role-based access control) models, but these two models cannot meet the application requirements of enterprise cloud storage, and there are some defects, mainly Expressed as:

[0007] 1) With the increase in the number of users and resources, the scale of ACL (AccessControlList, access control list) in DAC increases sharply, which is difficult to manage and maintain;

[0008] 2) To perform fine-grained access control, users must be accurately distinguished, so RBAC needs to define a large number of user roles, which brings difficulties to role allocation and management;

[0009] 3) They are all static authorization mechanisms, without considering the impact of context on authorization

[0010] 4) At the same time, for media resource files, there are many types and sources, and the authority requirements for each specific category are also different. The authority allocation and management of such media resources are more complicated

Images