云存储中基于ma-abe的访问控制方案-计算机科学.pdfVIP

Vo1. 44 No.2 第 44 卷第2 期 计算机科学 2017 年 2 月 COMPUTER SCIENCE Feb.2017 云存储中基于 MA-ABE 的访问控制方案 李谢华周茂仁刘婷 (湖南大学信息科学与工程学院 长沙 410082) 摘 要针对云存储中跨域数据访问控制的安全性和有效性问题，提出了一种基于 MA-ABE 的高效的、细粒度的访 问控制方案。新方案通过使用密钥分割技术和代理重加密技术，在权限撤销时保证用户密钥的安全性，并将大部分密 文重加密工作转移到云端，以降低数据局主的计算代价。利用数据局主和授权机构分别产生和分发属性私钥纽件，将 用户全球唯一标识(GID)和用户私钥相分离，避免了授权机构间的联合攻击，有效地保护了用户身份信息。最后，通 过理论分析表明了新方案的安全性，并实验验证了该方案在权限撤销时的高效性。 关键词 多授权机构，MA-ABE，数据访问控制，访问结构树 中图法分类号 TP393 文献标识码 A 001 10. 11896/j. issn. 1002-137叉 2017.02.028 MA-ABE Access Control Scheme in Cloud Storage LI Xie-hua ZHOU Mao-ren LIU Ting (School of Information Sciences and Engineering ,Hunan University ,Changsha 410082 ,China) Abstract In order to improve the security and efficiency of cross-domain data access in cloud storage , this paper prσ posesd a multi-authority attribute-based encryption (MA-ABE) access control scheme. The new scheme uses split-key to guarantee the security of users secret key. In addition ,proxy r e-encryption is used to load most of the r e-encryption to the cloud server when revocation occurs ,which can minimize the computation cost for the data owner (00). The spli ted secret key components are generated and distributed by the 00 and attribute authorities (AA) respectively without using their global identifier (GID) ,which can prevent authorities collusion attack. Finally ,theoretical analysis has been provided to prove that the new scheme is secure and has high performance on revocation. Keywords Multi-authority ,MA-ABE ,Data access control ,Access tree