云计算环境中基于属性的多权威访问控制方法

在云计算环境中,如何实现在不可信及动态变化的云计算环境中对加密数据的访问控制是云计算走向实际应用亟待解决的问题之一.文中提出了一种基于属性的访问控制方法,该方法将密文长度及加解密过程的计算量限制为固定值,提高了系统的计算效率,并且引入了层次化的授权结构,降低了单一权威授权的负担,提高了安全性.文中分析了方法的安全性、可扩展性和计算复杂性等性能,实验结果证明了该方法在域权威授权、用户授权及加解密等过程中的计算量上的优越性.

Attribute-Based Access Control with Multi-Authority Structure in Cloud Computing

How to achieve practicable and efficient access control for the encrypted private data in dynam- ic and untrusted cloud computing environment is one of the urgent problems . This paper proposes a hier- archical attribute-based access control scheme for improving the compute efficiency because of the con- stant size of ciphertext and computation costs in encryption and decryption algorithms. Furthermore, the hierarchical authorization structure is introduced , the burden is reduced in the case of one single authori- ty making the scheme secure, efficient and scalable. The security , the scalability and the computational complexity are analyzed. Experimental results demonstrate the superiority of computation costs in domain authority grant, user grant, encryption and decryption compared with others.