Data access permission updating method and device, equipment and readable storage medium

Abstract

The invention discloses a data access permission updating method, which comprises the following steps of: analyzing a file change event to obtain a target original file and target user information of an executor; selecting representative user information from each piece of user information except the target user information in an authorized user information group of the target original file, wherein the representative user information is used for decrypting the original ciphertext re-encryption key; decrypting a pre-stored first re-encrypted ciphertext packet by using the decrypted original plaintext re-encryption key to obtain a first ciphertext fragment of a mask ciphertext file corresponding to the target original file; performing recovering according to the first ciphertext fragment to obtain the mask ciphertext file, and generating a second random number; and calculating a target plaintext re-encryption key according to the mask ciphertext file and the second random number, and synchronizing the target plaintext re-encryption key to other user information except the target user information. According to the method, the data processing scale is reduced, and the data access permission updating burden is relieved. The invention further discloses a device, equipment and a storage medium, which have corresponding technical effects.

Description

technical field [0001] The present invention relates to the field of storage technology, in particular to a method, device, device and computer-readable storage medium for updating data access rights. Background technique [0002] With the explosive growth of data generated by technologies such as the Internet of Things and social networks, it is difficult for users to store these large-scale data locally. Due to the advantages of cloud storage, outsourcing big data to the cloud for storage has gradually become a trend. However, directly outsourcing data to the cloud will pose a threat to the security of user data, so users choose to encrypt the data before outsourcing the data. Due to different user encryption keys, the same data will be encrypted into different ciphertexts, which brings challenges to the cloud to perform deduplication operations. [0003] However, among the existing deduplication schemes, most of the ciphertext-based deduplication schemes do not support ...

AI Technical Summary

Problems solved by technology

In addition, there is also a way to update the data access authority by re-encrypting the ciphertext file as a whole. If the scale of the processed data is large and the authority update process is complicated, the corresponding cost will be high, resulting in a heavy burden on data access authority update.

Images