Cloud storage access control method based on attribute-based encryption

Abstract

The invention provides a cloud storage access control method based on attribute-based encryption. The specific process is as follows: firstly, defining an access control policy of a file, and storingthe access policy information of the file in the access control policy; secondly, performing primary encryption on the file by using a symmetric encryption algorithm; thirdly, extracting attributes ina standard policy, converting the attributes into the form of character strings necessary for CP-ABE according to the semantics, and receiving, by the CP-ABE, the character strings to serve as an attribute set; finally, performing secondary encryption on a symmetric key used in symmetrical encryption through the attribute set by adopting an attribute-based encryption algorithm, and storing the cipher corresponding to the key; and when the user needs to access the file stored in the encryption manner, firstly, decrypting the cipher of the symmetric key used for encrypting the file according tothe attribute information of the user to obtain the symmetric key, and then performing decryption access on the encrypted file by using the symmetric key. The method provides a dynamically scalable and efficient access control mechanism for user data.

Description

technical field [0001] The invention belongs to the technical field of cloud storage, and in particular relates to a cloud storage access control method based on attribute-based encryption. Background technique [0002] With the development of cloud storage technology, researchers have conducted research on access control, cryptography and other aspects according to the characteristics of cloud storage. At present, research on cloud storage access control is mainly divided into three aspects: research on access control models, research on cryptography, and research on secure cloud storage. [0003] Access control model: [0004] Access control refers to the restriction of the authority or ability of the access subject to access the target object according to its own needs, so as to ensure the effective management and use of data resources within the legal scope. According to different application scenarios, various access control models have been proposed. Role-based acce...

AI Technical Summary

Problems solved by technology

There are many problems in the existing technology: First, the existing cloud storage access control completely relies on the central decision-making body in the access control framework, and the credibility of the central decision-making body is not high, and the way of centralized decision-making is easier Under attack, user data security cannot be guaranteed

Second, when the number of users becomes large, the number of constraint rules required for user data becomes uncontrollable, and the complexity of the policy analysis process of the access control framework increases dramatically, which puts a lot of pressure on the access control engine and seriously affects the system. operational efficiency, which would also be a point of attack for the central decision-making body

Images