Cloud computing security access control method and system

Abstract

The invention provides a cloud computing security access control method and system. The method comprises the following steps: signing and issuing a first public key certificate to a data using end through a certificate issuing mechanism; forming a user decryption key through an attribute management mechanism, distributing different user decryption keys to different roles according to an access control strategy, wherein the user decryption keys are used for encrypting data resources provided by a data providing end; encrypting the user decryption key through the public key, and storing the encrypted user decryption key to the cloud platform; according to the access control strategy and the first public key certificate, determining the role of a data use end, and sending a corresponding encrypted user decryption key to the data use end; and under the condition that the data use end successfully decrypts the encrypted user decryption key through the private key, enabling the data use end to access the data resource through the corresponding role. According to the invention, flexible management can be provided for strategies executed by a large number of users while the security requirement is supported.

Description

technical field [0001] The invention relates to the technical field of data information security, in particular to a cloud computing security access control method and system. Background technique [0002] Cloud computing is a low-cost and high-efficiency solution in today's big data management. When adopting cloud solutions to store large-scale and high-value data, its security and privacy are very important, and encryption technology and access control models usually need to be deployed to meet the security requirements of the cloud. Access control is one of the most effective solutions for network security. [0003] However, the existing big data data access control cannot provide flexible management for policies executed by a large number of users while supporting security requirements. Contents of the invention [0004] In order to solve the above problems, the cloud computing security access control method and system provided by the present invention can provide fl...

AI Technical Summary

Problems solved by technology

[0003] However, the existing big data data access control cannot provide flexible management for policies executed by a large number of users while supporting security requirements.

Images