Government services cloud access control method based on attribute encryption

Abstract

The invention discloses a government services cloud access control method based on attribute encryption. A central authority determines all attributes of a system, permits or revokes attribute authority management authority, and authenticates administrative staff; an attribute authority receives the login of administrative staff in the jurisdiction thereof and is simultaneously responsible for attribute revocation of the administrative staff; a cloud server stores data and carries out semi-decryption on an encrypted file when a user sends out a data request; a data uploader makes an access control strategy according to the security level of the file, and encrypts and uploads the file after name signing; and an access user sends out a data access request and finally decrypts the encrypted file. By adopting the attribute encryption scheme, the loads caused by user attribute revocation and encrypted file updating are reduced, the trap door information capturing of the user is controlled, and attribute revocation is carried out on the user under the condition that the encrypted file is not changed; in addition, by utilizing the name signing and attribute encryption scheme based on the identity, the safety authority of the user and fine-grained access control are realized.

Description

technical field [0001] The invention belongs to the technical field of cloud data information security, and in particular relates to an attribute encryption-based government cloud access control method. Background technique [0002] As early as May 2010, recovery.gov, a website of the U.S. government, had fully used Amazon’s AWS, becoming the first cloud computing project of the U.S. government’s IT system. collaboration. This successful case has made the government departments of various countries see an opportunity, so the government departments of all countries are making efforts to carry out e-government reform. With the progress of government reform, government departments have also begun to purchase services from telecom operators instead of building their own platforms. After the construction of major e-government projects such as the "Golden Letter Project" in my country, the vertical e-government of vertical management departments has reached a relatively high lev...

AI Technical Summary

Problems solved by technology

[0004] The purpose of the present invention is to provide an attribute encryption-based government cloud access control method, aiming to solve the access security problem in e-government in the era of cloud computing

Images