HONG Cheng, ZHANG Min, FENG Deng-guo. Achieving efficient dynamic cryptographic access control in cloud storage[J]. 2011, 32(7): 125-132.DOI:
面向云存储的高效动态密文访问控制方法
摘要
针对云存储中敏感数据的机密性保护问题
在基于属性的加密基础上提出了一种密文访问控制方法HCRE。其思想是设计一种基于秘密共享方案的算法
将访问控制策略变更导致的重加密过程转移到云端执行
从而降低权限管理的复杂度
实现高效的动态密文访问控制。实验分析表明HCRE显著降低了权限管理的时间代价
而且没有向云端泄露额外的信息
保持了数据机密性。
Abstract
To keep the data in the cloud confidential against unauthorized parties
a cryptographic access control solution called hybrid cloud re-encryption(HCRE) based on attribute-based encryption(ABE) was introduced.HCRE designed a secret sharing scheme to delegate the task of ABE re-encryption to the cloud service provider(CSP)
which alleviates the administering burdens on the data owner.Experiments show that HCRE can handle dynamic access policies in a more ef-ficient way.Additionally
HCRE does not reveal extra information of the plaintext to the CSP