Cloud data deterministic deletion method for supporting fine-grained access

Abstract

The invention relates to a cloud data deterministic deletion method for supporting fine-grained access, comprising the following steps: a data owner encrypts data and outsources the encrypted data toa cloud server, so that only the user who meets an access requirement can decrypt the data; when the data owner wants to delete the data stored in the cloud server, the owner first sends a deletion request to a trusted authority center, which returns a deletion key, namely, a re-encrypted key to the data owner, the data owner sends the deletion key to the cloud server, and the cloud server carriesout a deletion operation on the data; after performing the deletion operation, the cloud server returns a certificate to the data owner, and the data owner verifies that the target data has been deleted through a Merkle hash tree. The cloud data deterministic deletion method in the invention utilizes attribute revocation and the Merkle hash tree to realize verifiable data deletion, supports fine-grained access control to achieve the purpose of privacy protection, and greatly improves the use ratio of the cloud server.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to a cloud data deterministic deletion method supporting fine-grained access. Background technique [0002] As a new computing model, cloud computing makes data storage and data sharing more convenient and economical. It can integrate a large number of high-quality resources, and integrate different resources to provide users with massive storage and efficient and fast computing services. Users can access shared resources anytime and anywhere, which greatly saves user costs and improves resource utilization. More and more users like to store data on the cloud, which contains a large amount of sensitive data such as health data, financial data, business secrets and other data, making data privacy and other security issues become the focus of public attention. [0003] Due to the use of cloud computing technology, the ownership and management of cloud data are se...

AI Technical Summary

Problems solved by technology

[0012] In order to solve the above problems in the prior art, the present invention provides a cloud data deterministic deletion method that supports fine-grained access, aiming at possible data leakage in cloud storage, illegal cross-cloud migration of data, and unauthorized access Security issues such as security issues and the problem that it is difficult to verify that the data requested to be deleted by the user in the cloud storage environment has actually been deleted, a key policy with attribute revocation function is proposed based on attribute encryption method to achieve the deterministic deletion of cloud data, using The attribute set describes the ciphertext. If the attribute corresponding to the ciphertext satisfies the access structure of the private key, the user can access the file

Images