Heterogeneous cross-trust-domain secret data security sharing method and system

Abstract

The invention relates to a heterogeneous cross-trust-domain secret data security sharing method and a system. Flexible access control is realized by introducing an attribute-based encryption strategyinto a centerless environment; keyword retrieval of the ciphertext is realized based on the encrypted index and the smart contract, real storage of the data and data address storage on the blockchainare segmented to reduce the storage overhead of the blockchain, and data security sharing service based on identity attributes and keyword ciphertext retrieval is realized. Compared with the prior art, the distributed decentralized security data sharing mechanism is realized through the decentralized P2P storage system IPFS and the blockchain technology.

Description

technical field [0001] The invention relates to a method for securely sharing encrypted state data, in particular to a method and system for safely sharing heterogeneous cross-trust domain encrypted state data. Background technique [0002] With the development of Internet technology, cloud storage has become an important business service model that people need in their daily life. [0003] Cloud storage technology can provide users with various storage services, so that users (enterprises and individuals) can access network resources and share data anytime and anywhere. [0004] However, since the cloud service provider is not completely trustworthy, and the data stored in the cloud is actually out of the user's physical control, how to ensure the privacy and security of user data and how to ensure that users can smoothly access the required data become One of the important issues that need to be faced in the development of cloud storage. [0005] At the same time, the ce...

AI Technical Summary

Problems solved by technology

[0014] However, many SE schemes only support single-user retrieval, and cannot face the retrieval scenarios of a large number of users in a cross-trust domain environment, and the retrieval strategies of many existing SE schemes only support simple exact equality or AND gate matching, which cannot achieve flexible retrieval. Strategy

[0015] At the same time, most SE solutions are considered in a centralized environment. There is no effective solution for how to achieve flexible and efficient searchable ciphertext retrieval services in a distributed environment without a fully trusted authorization center.

Images