Fine-grained access control scheme supporting emergency processing in industrial cloud

Abstract

The invention relates to a fine-grained access control scheme supporting emergency processing in industrial cloud, which constructs a system model integrating attribute authority, a fog node, a cloud platform, a data owner, a data user and emergency response personnel, constructs a CP-ABE algorithm by using asymmetric bilinear pairing, and on the basis of the CP-ABE algorithm, establishes a fine-grained access control scheme for supporting emergency processing in industrial cloud. Aiming at the availability and emergency processing requirements of industrial cloud, a fine-grained access control scheme and algorithm capable of breaking glass are designed; the working process of the scheme is as follows: in a normal condition, the system executes access control based on attribute encryption; in an emergency, the system executes access control of broken glass, and allows emergency response personnel without access authority to avoid an original access strategy and quickly access plaintext data; according to the scheme, the broken glass secret key can be responsibilized, so that the problem of secret key abuse is avoided; the scheme adopts an asymmetric bilinear pair structure, and a large amount of calculation is outsourced to cloud and mist, so that the calculation and storage overhead is small and constant.

Description

technical field [0001] The invention relates to the technical field of industrial data encryption, in particular to a fine-grained access control scheme supporting emergency handling in an industrial cloud. Background technique [0002] In recent years, cloud computing has been connected with enterprises, products, systems, machines and users to form an industrial cloud platform. In this process, the combination of information technology, communication technology and operation technology has greatly promoted industrial production, and at the same time, the control system has become more and more open, and the identities of access personnel have become more and more complex and diverse. Therefore, in an incompletely trusted industrial cloud environment, a method that can not only utilize the computing and storage capabilities of the cloud platform, but also achieve fine-grained access control has become a research hotspot. [0003] At present, Ciphertext-PolicyAttribute Base...

AI Technical Summary

Problems solved by technology

Most of the existing ABE algorithms use symmetric bilinear pairing construction and are implemented on supersingular elliptic curves. The maximum embedding degrees of the curves are 2, 4 and 6 respectively. Cyber ​​attacks can reduce the complexity of solving the Discrete Logarithmic Problem (DLP), thereby affecting the security of the algorithm constructed by symmetric pairing

[0006] In addition, most existing ABAC schemes are not suitable for emergency situations in industrial environments

Images