一种云存储下多授权访问控制及用户属性撤销方案

A Scheme of Multi-authorization Access Control and User Attribute Revocation in Cloud Storage

摘要: 云存储下已有基于属性加密的访问控制研究多是基于单授权中心来实现, 该种方案在授权方不可信或遭受恶意攻击的情况下可能会造成密钥泄露.基于CP-ABE设计了一种多授权访问控制方案, 引用代理服务器(Proxy Server, PS), 帮助用户承担大量解密操作; 对用户属性撤销问题采用高效安全的算法进行处理; 最后, 利用双线性判定(Decision Bilinear Diffie-Hellman, DBDH) 假设理论证明是选择明文攻击安全的.

Abstract: The research of access control based on attribute encryption has been implemented in cloud storage, which is mostly based on single authorization center, may result in the leakage of key.Proposing a CP-ABE design of a multi access control scheme based on reference proxy server (Proxy Server, PS), to help users to undertake a large number of decryption operation; Problems with high security attributes revocation algorithm for processing; Finally, using the bilinear decision (Decision Bilinear Diffie-Hellman, DBDH) proved to be the chosen plaintext attack security.