云存储系统中支持用户隐私保护的细粒度访问控制

doi:10.3969/j.issn.1000-436x.2014.z2.007

通信学报 ›› 2014, Vol. 35 ›› Issue (Z2): 42-47.doi: 10.3969/j.issn.1000-436x.2014.z2.007

云存储系统中支持用户隐私保护的细粒度访问控制

肖敏,王春蕾,周由胜

重庆邮电大学计算机科学与技术学院，重庆 400065

出版日期:2014-11-25 发布日期:2017-06-19
基金资助:
国家社会科学基金资助项目;重庆市应用研究项目基金和先进技术资助项目;重庆市自然科学基金资助项目;重庆市自然科学基金资助项目

Fine-grained access control scheme with user privacy protection in cloud storage systems

Min XIAO,Chun-lei WANG,You-sheng ZHOU

College of Computer Engineering,Chongqing University of Posts and Telecommunications,Chongqing 400065,China

Online:2014-11-25 Published:2017-06-19
Supported by:
The National Social Science Foundation of China;Chongqing Natural Science Foundation;Chongqing Natural Science Foundation

摘要/Abstract

摘要：

从云存储实际需求出发，设计了一个云存储环境下支持用户隐私保护和用户属性撤销的多属性权威的属性加密机制，为了保证系统实现的效率和减轻数据持有者的负担，在属性撤销中，复杂的计算任务都委托给可信第三方或云服务器完成。所提方案在DBDH假设下被证明是安全的。

关键词: 云存储, 属性加密, 多授权中心, 隐私保护, 属性撤销

Abstract:

Based on the actual demands of cloud storage system,a new multi-authority ABE (MA-ABE) scheme is constructed to support user privacy protection and attribute revocation.For enhancing efficiency and alleviatingowner’s computing load，the complex computing works involved in attribute revocation are delegated to a trusted third party orcloud server.The proposed scheme is provably secure under the DBDH assumption.

Key words: cloud storage, attribute based encryption, multi-authority, privacy protection, attribute revocation

肖敏,王春蕾,周由胜. 云存储系统中支持用户隐私保护的细粒度访问控制[J]. 通信学报, 2014, 35(Z2): 42-47.

Min XIAO,Chun-lei WANG,You-sheng ZHOU. Fine-grained access control scheme with user privacy protection in cloud storage systems[J]. Journal on Communications, 2014, 35(Z2): 42-47.

图/表 1

表1

匿名密钥分发协议"

User u		Attribute Authority
$ρ_{1} \in Z_{q}$	$\overset{2 P C}{\leftrightarrow}$	$x : = (β + u) ρ_{1}, τ \in Z_{q}$
$ρ_{2} \in Z_{q}$	$\overset{X_{1}, X_{2} P o K α τ x}{\leftarrow}$	$X_{1} : = l^{τ / x}, X_{2} = h^{α τ}$
$Y : = {(X_{1}^{ρ_{1}} X_{2})}^{ρ_{2}}$	$\overset{Y, P o K ρ_{2}}{\to}$
$D : = Z^{1 / ρ_{2}}$	$\overset{Z, P o K (τ γ)}{\leftarrow}$	$Z : = Y^{γ / τ}$

表1

参考文献 11

[1]	SAHAI A , WATERS B . Fuzzy identity-based encryption[A]. Advances in Cryptology-Eurocrypt[C]. 2005. 457-473.
[2]	GOYAL V , PANDEY O , SAHAI A ,et al. Attribute-based encryption for fine-grained access control of encrypted data[A]. ACM Conference on Computerand Communications Security-CSS[C]. 2006. 99-112.
[3]	BETHENCOURT J , SAHAI A , WATERS B . Ciphertext-policy attribute-based encryption[A]. IEEE Symposium on Security and Privacy[C]. New York: IEEE Press, 2007. 321-334
[4]	YU S , WANG C , REN K ,et al. Attribute based data sharing with attribute revocation[A]. ACM Symp Information,Computer and Comm Security (ASIACCS ’10)[C]. 2010.
[5]	YANG K , JIA X , REN K . Attribute-based fine-grained access control with efficient revocation in cloud storage systems[A]. The 8th ACM SIGSAC Symposium on Information,Computer and Communications Security(ASIA CCS’13)[C]. 2013. 523-528.
[6]	CHASE M . Multi-authority attribute based encryption[A]. The 4th Theory of Cryptography Conference on Theory of Cryptography (TCC’07)[C]. Springer, 2007. 515-534.
[7]	CHASE M , CHOW S . Improving privacy and security in multi-authority attribute-based encryption[A]. The 16th ACM Conference on Computer and Communications Security (CCS’09)[C]. ACM, 2009. 121-130.
[8]	NAOR M , PINKAS B , REINGOLD O . Distributed pseudo-random functions and KDCs[A]. Advances in Cryptology:EUROCRYPT '99 (J.Stern,ed.),Lecture Notes in Computer Science[C]. 1999.
[9]	YANG K , JIA X , REN K ,et al. DAC-MACS:effective data access control for multi-authority cloud storage systems[A]. IEEE INFOCOM[C]. 2013. 2895-2903.
[10]	YANG K , JIA X . Expressive,efficient and revocable data access control for multiauthority cloud storage[J]. IEEE Transactions on Parallel and Distributed Systems, 2014,25: 1735-1744.
[11]	JARECKI S , LIU X . Efficient oblivious pseudorandom function with applications to adaptive OT and secure computation of set intersection[J]. Theory of Cryptography Lecture Notes in Computer Science, 2009,(5444): 577-594.

[1]	马鑫迪, 李清华, 姜奇, 马卓, 高胜, 田有亮, 马建峰. 面向Non-IID数据的拜占庭鲁棒联邦学习[J]. 通信学报, 2023, 44(6): 138-153.
[2]	冯涛, 陈李秋, 方君丽, 石建明. 基于本地化差分隐私和属性基可搜索加密的区块链数据共享方案[J]. 通信学报, 2023, 44(5): 224-233.
[3]	夏莹杰, 朱思雨, 刘雪娇. 区块链架构下具有条件隐私的车辆编队跨信任域高效群组认证研究[J]. 通信学报, 2023, 44(4): 111-123.
[4]	胡柏吉, 张晓娟, 李元诚, 赖荣鑫. 支持多功能的V2G网络隐私保护数据聚合方案[J]. 通信学报, 2023, 44(4): 187-200.
[5]	徐明, 张保俊, 伍益明, 应晨铎, 郑宁. 面向网络攻击和隐私保护的多智能体系统分布式共识算法[J]. 通信学报, 2023, 44(3): 117-127.
[6]	余晟兴, 陈钟. 基于同态加密的高效安全联邦学习聚合框架[J]. 通信学报, 2023, 44(1): 14-28.
[7]	韩益亮, 郭凯阳, 吴日铭, 刘凯. 格上基于OBDD访问结构的抗密钥滥用属性加密方案[J]. 通信学报, 2023, 44(1): 75-88.
[8]	哈冠雄, 贾巧雯, 陈杭, 贾春福. 无第三方服务器的基于数据流行度的加密去重方案[J]. 通信学报, 2022, 43(8): 17-29.
[9]	张学旺, 黎志鸿, 林金朝. 基于公平盲签名和分级加密的联盟链隐私保护方案[J]. 通信学报, 2022, 43(8): 131-141.
[10]	杜瑞忠, 张添赫, 石朋亮. 基于区块链且支持数据共享的密文策略隐藏访问控制方案[J]. 通信学报, 2022, 43(6): 168-178.
[11]	王继锋, 王国峰. 边缘计算模式下密文搜索与共享技术研究[J]. 通信学报, 2022, 43(4): 227-238.
[12]	封化民, 史瑞, 袁峰, 李艳俊, 杨旸. 高效的强隐私保护和可转让的属性票据方案[J]. 通信学报, 2022, 43(3): 63-75.
[13]	于海宁, 张宏莉, 余翔湛, 曲家兴, 葛蒙蒙. 隐私保护的轨迹相似度计算方法[J]. 通信学报, 2022, 43(11): 1-13.
[14]	彭滔, 钟文韬, 王国军, 罗恩韬, 熊金波, 刘忆宁, Hao Wang. 移动社交网络中面向隐私保护的精确好友匹配[J]. 通信学报, 2022, 43(11): 90-103.
[15]	史瑞, 封化民, 谢惠琴, 史国振, 刘飚, 杨旸. 基于带智能卡的移动终端实现的隐私保护的属性票据方案[J]. 通信学报, 2022, 43(10): 26-41.

云存储系统中支持用户隐私保护的细粒度访问控制

Fine-grained access control scheme with user privacy protection in cloud storage systems

在线阅读

PDF下载

可视化

摘要/Abstract

引用本文

使用本文

图/表 1

参考文献 11

相关文章 15

Metrics

推荐阅读 0