采用加密机制在云计算环境中进行访问控制

从数据的隐私角度来讲,公有云的服务提供商对用户来说是不可信的。为保障用户数据私密性,需要采用加密技术在云计算这种开放互联的环境中对托管数据进行访问控制。文中对广播加密机制和CPK组合公钥密码机制在云计算环境中的访问控制应用进行了探讨,并对这两种加密机制的主要理论基础——多项式插值法、多线性映射,以及ECC复合定理进行了介绍。通过加密技术的应用,为实现在云计算等不可信的空间安全存取敏感数据提供了一种研究思路。

Access Control by Encryption Mechanism in Cloud Computing Environment

From the angle of data privacy,the service provider for public cloud is unbelievable. To guarantee the privacy of user data,encryption technique should be used to implement the access control on outsourced data in open environment such as cloud computing. The broadcast encryption mechanism and the combined public key cryptosystem to implement access control in the cloud computing environment are explored,and the principal theoretical foundations of these two encryption mechanisms also described,including polynomial interpolation,multilinear map,and composite ECC theorem. The application of encryption technique provides a research idea in implementing secure access of important data in unbelievable space such as cloud computing.