APP user data access control system and method based on attribute encryption

Abstract

The invention relates to an APP user data access control system and method based on attribute encryption. The system comprises an attribute authorization authority AA, a central authority CA, a user data owner AUDO, a cloud server CS and a user data visitor AUDA. The AUDO performs symmetric encryption on the data by adopting a symmetric encryption algorithm, encrypts a symmetric key by using an attribute public key and an identity public key in combination with an encryption algorithm, and finally sends the encrypted data to the CS for storage; and the AUDA sends a request to the CS, the CS decrypts the ciphertext by using an attribute key of the AUDA to obtain a converted ciphertext and returns the converted ciphertext to the AUDA, the AUDA decrypts the returned converted ciphertext by using an identity key of the AUDA, and the CS only solves the correct converted ciphertext for the AUDA conforming to the access strategy. An access control scheme of attribute encryption based on a ciphertext strategy is introduced, so that the encryption and decryption operation efficiency is improved; and whether the access authority exists or not is judged through the attributes of the user data accessor, and the access control flexibility is improved under the condition that the data security is ensured.

Description

technical field [0001] The invention relates to a data security technology, in particular to an APP user data access control system and method based on attribute encryption. Background technique [0002] With the rapid development of information technology, computers and networks have become necessary tools and approaches for daily office work, communication and collaboration. However, while the information system improves people's work efficiency, it also raises security requirements for information storage, access control, and access control of computer terminals and servers in the information system. After the development of cloud storage technology, existing information technology can be used to store user privacy data on the cloud, which can be downloaded and accessed by authorized data visitors, thus effectively preventing APP user data leakage. [0003] Existing cloud storage technologies face many security challenges. Data leaks, data loss, hijacked accounts, and in...

AI Technical Summary

Problems solved by technology

[0003] Existing cloud storage technologies face many security challenges, data leaks, data loss, hijacked accounts and insider threats all make cloud storage unreliable

Images