Efficient searchable access control method based on hidden strategy CP-ABE

Abstract

The invention discloses an efficient searchable access control method based on a hidden strategy CP-ABE, which belongs to the field of information security. The method is based on a public key and a main key which are generated by a cloud server and are used for encrypting data. A data owner encrypts the uploaded data and the optional search keywords respectively according to the optional access strategy and the public key, sends the ciphertext to the cloud server and sends the keyword ciphertext to the search server. After the data visitor makes an access request to the cloud server, the cloud server generates a private key according to the attribute of the visitor and sends the private key to the visitor. The visitor encrypts the selected search keyword by using the private key to generate a keyword trap door, and sends the keyword trap door to the search server for ciphertext search; the search server returns the matched ciphertext number to the visitor through the cloud server; andthe visitor decrypts the ciphertext according to the private key of the visitor, and if the access strategy is met, decryption can be successfully carried out. The method is low in operation cost andhigh in operation efficiency.

Description

technical field [0001] The invention belongs to the field of information security, and in particular relates to an efficient searchable access control method based on a hidden policy CP-ABE (CiphertextPolicy Attribute Based Encryption, ciphertext policy attribute based encryption system). Background technique [0002] With the popularization and promotion of cloud computing technology, more and more data began to be migrated to cloud servers. In today's widely used cloud environment, there are geographical isolation and complex relationships between different types of users. In the cloud environment, users need to achieve safe sharing of files and data. Some of these data are highly confidential and Private data with security guarantee requirements. Cloud service providers need to provide cloud-specific security assurance solutions for this type of data. The traditional public key cryptosystem is difficult to adapt to the distributed environment of cloud services, and cann...

AI Technical Summary

Problems solved by technology

The above patents are based on the original CP-ABE method, which is limited by performance because the key length will increase linearly with the number of attributes

Images