| 基于CP-ABE和XACML多权限安全云存储访问控制方案 |
| |
| 引用本文： | 刘晓建,王力生,廖新考.基于CP-ABE和XACML多权限安全云存储访问控制方案[J].计算机科学,2016,43(3):118-121. |
| |
| 作者姓名： | 刘晓建 王力生 廖新考 |
| |
| 作者单位： | 同济大学电子与信息工程学院 上海201804,同济大学电子与信息工程学院 上海201804,同济大学电子与信息工程学院 上海201804 |
| |
| 基金项目： | 本文受国家高技术研究发展计划(863项目)(2013AA040302)资助 |
| |
| 摘 要： | 为了保护云存储系统中用户数据的机密性和用户隐私,提出了一种基于属性加密结合XACML框架的多权限安全云存储访问控制方案。通过CP-ABE加密来保证用户数据的机密性,通过XACML框架实现基于属性细粒度访问控制。云存储系统中的用户数据通过对称加密机制进行加密,对称密钥采用CP-ABE加密。仿真实验表明,该方案是高效灵活并且安全的。安全性分析表明,该方案能够抵抗共谋攻击,具有数据机密性以及后向前向保密性。
|
| 关 键 词： | 云存储 访问控制 密文策略属性加密 XACML |
| 收稿时间： | 2015/9/16 0:00:00 |
| 修稿时间： | 2015/12/24 0:00:00 |
Multiple Permissions Secure Access Control Scheme Combining CP-ABE and XACML in Cloud Storage |
| |
| LIU Xiao-jian,WANG Li-sheng and LIAO Xin-kao.Multiple Permissions Secure Access Control Scheme Combining CP-ABE and XACML in Cloud Storage[J].Computer Science,2016,43(3):118-121. |
| |
| Authors: | LIU Xiao-jian WANG Li-sheng and LIAO Xin-kao |
| |
| Affiliation: | College of Electronics and Information Engineering,Tongji University,Shanghai 201804,China,College of Electronics and Information Engineering,Tongji University,Shanghai 201804,China and College of Electronics and Information Engineering,Tongji University,Shanghai 201804,China |
| |
| Abstract: | In order to protect the confidentiality of user data and user privacy in cloud storage system,multiple permissions secure access control scheme combining ciphertext-policy attribute-based encryption(CP-ABE) and XACML was proposed.The confidentiality of user data is ensured by CP-ABE encryption and properties of fine-grained access control are implemented by XACML framework.In cloud storage system user data is encrypted by symmetric encryption mecha-nism,and symmetric key encryption uses the CP-ABE.Simulation results show that the model is efficient,flexible,and secure.Security analysis shows that the scheme can resist collusion attacks,has data confidentiality and backward forward confidentiality. |
| |
| Keywords: | Cloud storage Access control Ciphertext-policy attribute-based encryption XACML |
| 本文献已被 万方数据 等数据库收录！ |
|
点击此处可从《计算机科学》下载全文 |
|
