An Efficient Searchable Access Control Method Based on Concealment Policy CP-ABE

Abstract

The invention discloses an efficient searchable access control method based on the concealment policy CP‑ABE, which belongs to the field of information security. The present invention is based on the public key and master key used to encrypt data generated by the cloud server; the data owner encrypts the uploaded data and self-selected search keywords according to the self-selected access strategy and public key, and sends the ciphertext to the cloud The server sends the keyword ciphertext to the search server; when the data visitor makes an access request to the cloud server, the cloud server generates its private key according to the attributes of the visitor and sends it to the visitor; the visitor uses the private key to search for the selected search server. The keyword is encrypted to generate a keyword trapdoor, and the keyword trapdoor is sent to the search server for ciphertext search; the search server returns the matching ciphertext number to the visitor through the cloud server; the visitor uses his private key to The ciphertext is decrypted, and it can be successfully decrypted if the access policy is satisfied. The invention has low operation cost and high operation efficiency.

Description

technical field [0001] The invention belongs to the field of information security, and in particular relates to an efficient searchable access control method based on a hidden policy CP-ABE (CiphertextPolicy Attribute Based Encryption, ciphertext policy attribute based encryption system). Background technique [0002] With the popularization and promotion of cloud computing technology, more and more data began to be migrated to cloud servers. In today's widely used cloud environment, there are geographical isolation and complex relationships between different types of users. In the cloud environment, users need to achieve safe sharing of files and data. Some of these data are highly confidential and Private data with security guarantee requirements. Cloud service providers need to provide cloud-specific security assurance solutions for this type of data. The traditional public key cryptosystem is difficult to adapt to the distributed environment of cloud services, and cann...

AI Technical Summary

Problems solved by technology

The above patents are based on the original CP-ABE method, which is limited by performance because the key length will increase linearly with the number of attributes

Images