Multi-authorization center access control method and system and cloud storage system

Abstract

The invention belongs to the technical field of information security, and discloses a multi-authorization center access control method and system and a cloud storage system, and the method comprises the steps: system initialization: initializing a global authentication center CA and an attribute authorization center AA; data encryption: outsourcing encryption and user encryption performed by a cloud service provider; key generation: an attribute authorization center AA allocates an attribute private key related to the attribute and a user decryption key to the user; the user sends a file access request to the cloud service provider, and the process comprises outsourcing decryption of the cloud service provider and final decryption of the user; some users in the system are revoked; certainattributes in the system are revoked. The method has the advantages of high system efficiency, reduction of user computing burden, support of multiple authorization centers, dynamic change of user permission and the like, and can be used in a cloud storage system to guarantee the data privacy security of users, reduce the computing overhead of the users and improve the system efficiency.

Description

technical field [0001] The invention belongs to the technical field of information security, and in particular relates to a multi-authorization center access control method, system and cloud storage system. Background technique [0002] At present, the closest existing technology: cloud computing has gradually matured after more than ten years of development since it was proposed, and is in a period of explosive growth. Cloud computing is an intensive computing mode centered on data and processing power, and it is also an entity with huge computing power and storage capacity. The rapid expansion of business volume, information volume, and the number of users brought about by the development of cloud computing has caused massive data processing problems. Therefore, efficient data processing technology is one of the indispensable core technologies of cloud computing. For cloud computing, data management faces huge challenges. Derived from it is the concept of cloud storage,...

AI Technical Summary

Problems solved by technology

[0009] (1) In the previous attribute encryption process, according to the CP-ABE algorithm, the data owner specifies the access structure and independently completes the encryption and decryption calculations. In order to meet the data security, the encryption and decryption have a huge amount of calculation. When more and more, the computing overhead brought to users is incalculable

In addition, when performing attribute revocation, the data needs to be re-encrypted and then placed in the cloud, and the calculation and communication overhead are also very large

[0010] (2) In the entire outsourcing scheme, all key generation and distribution are in the charge of the authorization center, so once the authorization center has information leakage problems, the privacy and security of users will not be guaranteed

(2) The technical bottleneck of the attribute set encryption algorithm is due to the heavy computational burden of encryption and decryption for users, which is also an important reason why this technology is difficult to be practically applied at present

Images