A fine-grained access control method supporting data security grading in a dual-cloud environment

Abstract

The application discloses a fine-grained access control method supporting data security grading in a double-cloud environment, and relates to the field of network communication.The method comprises the following steps: a key is generated by an authorization center; encryption data A with a lower security level stored in a first cloud server and encryption data B with a higher security level stored in a second cloud server are encrypted by a data owner; the encryption data A is decrypted by the first cloud server and a data visitor; the data visitor re-requests the key from the authorization center; the encryption data B is decrypted by the second cloud server and the data visitor; and the data visitor obtains the required complete data.The application uses the cloud servers of two cloud service providers to provide data outsourcing services, each cloud server only stores a part of data, thereby effectively reducing the risk that the data of the data owner is leaked at one time; and the security levels of the two cloud servers are different, data is stored according to the security levels, and the security grading management of the data can be better achieved.

Images