A multi-granularity access control method in big data environment

Abstract

The invention discloses a multi-granularity access control method under a big data environment, which is characterized in that multi-granularity access control is realized through enriching file-level access control into access control for three levels such as folders, files and file metadata, and the data security under the big data environment is guaranteed from multiple levels. A folder-based access control policy is specified when a user creates a folder, a file and file metadata based access control policy is specified when a file is uploaded, and a file can be optionally encrypted by adopting a mode of CPABE (Ciphertext policy attribute-based encryption), thereby enabling the file to be stored in the cloud in the form of a ciphertext, and adapting to the semi-trusted property of the cloud. When the user requests data, the access permission for a folder and the access permission for a file are sequentially judged, the ciphertext can be obtained only when conditions are met simultaneously, and decryption is performed by using a key of the user. Due to addition of a policy conflict detection and policy merging module, the running of the whole system is enabled to be more efficient.

Description

technical field [0001] The invention belongs to the technical field of computer storage security, and more specifically relates to a multi-granularity access control method in a big data environment. Background technique [0002] The advent of the era of big data has made data a valuable property of companies, an important economic input and the cornerstone of new business models. The use and sharing of user data not only brings business opportunities to enterprises, but also brings unprecedented data security risks. [0003] With the gradual increase in the use of big data, the realization of controlled sharing of data is also an urgent problem to be solved. Access control technology is an important security protection technology that can effectively prevent unauthorized users from obtaining confidential and private information. [0004] For the existing single-granularity access control methods, due to the complex application scenarios and diverse requirements of big data...

AI Technical Summary

Problems solved by technology

[0005] In view of the above defects or improvement needs of the prior art, the present invention provides a multi-granularity access control method in a big data environment, the purpose of which is to solve the problem that the existing single-granularity access control method cannot meet the diverse access requirements of different applications , and thus cannot effectively guarantee the technical problem of safe access to data in the big data environment

Images