A Outsourcing Mandatory Access Control Method Based on Hierarchical Attribute Encryption

Abstract

The invention provides an outsourcing mandatory access control method based on hierarchical attribute-based encryption, and aims at solving the access control problem of outsourcing data. According tothe method, the mechanism of combining a hierarchical attribute-based encryption (HABE) mechanism with mandatory access control (MAC) is adopted, fine-grained data reading and writing mandatory access control which is controlled by an owner and in-time user permission revoking in an outsourcing environment are supported, unidirectional flowing of information is achieved, and the data confidentiality is guaranteed.

Description

technical field [0001] The invention relates to the field of data security in the disciplines of computer science and information security, in particular to fine-grained access control to data. Background technique [0002] The main goals of information security are confidentiality, integrity and availability. For the government, the military, and enterprises and institutions, preventing the leakage of secret information is always the top priority of the work. Access control is one of the main means of achieving confidentiality. Discretionary Access Control (DAC for short) policy allows users to independently control other users' access rights to their own objects, and the access control work of the system is distributed to all users, so that these users can complete it together. However, DAC itself has unavoidable defects, for example, it cannot prevent the threat of Trojan horses. Compared with discretionary access control, mandatory access control (Mandatory Access Con...

AI Technical Summary

Problems solved by technology

[0006] CN201410055341.9 proposes an outsourced decryption method on the basis of CP-ABE, which realizes efficient decryption, but does not consider the issue of user authority revocation

CN201310647570.5 proposes a CP-ABE method, which can realize efficient decryption and user revocation, and can realize user authority revocation, but this kind of user revocation method will bring huge overhead. In order to achieve higher key distribution In the article "Enhancing attribute-based encryption with attribute hierarchy", the author Li J et al. proposed a hierarchical attribute encryption scheme, which uses a tree-like hierarchical structure to manage attributes, and the hierarchical relationship between attributes is consistent with reality. The organizational structure in life is similar to

Images