多机构云存储下的安全高效属性基访问控制

152 浏览量更新于2024-08-29 收藏 827KB PDF 举报

"Secure and Efﬁcient Attribute-Based Access Control for Multi-authority Cloud Storage" 是一篇研究论文，主要关注于云计算环境中数据共享的访问控制问题。随着云存储技术的发展，个人和企业能够通过互联网经济地分享大量数据，但这也带来了对数据访问安全的重大挑战，因为单个云服务器往往难以完全信任。文章提出了一个有前景的解决方案——基于 ciphertext-policy attribute-based encryption (CP-ABE) 的安全和成本效益高的多权威机构云存储访问控制系统。该论文的核心创新在于设计了一种无需全权可信中心机构的多权威CP-ABE体系。在这个体系中，用户由各个独立的属性权威机构（attribute authorities）颁发密钥，而非依赖于单一中心。这种设计增强了系统的安全性，因为它分散了关键的密钥管理责任，降低了单点故障的风险。此外，每个属性权威机构还具备动态权限管理的能力，允许它们在必要时删除用户的访问权限，提高了灵活性和响应性。具体来说，该系统的优势包括： 1. 去中心化管理：通过将密钥发行分散到多个属性权威机构，系统降低了对单一可信中心的依赖，增加了系统的可靠性。 2. 细粒度权限控制：CP-ABE允许数据所有者设定精确的访问控制规则，确保只有具有相应属性的用户才能访问特定数据，实现了数据的按需授权。 3. 高效性和成本效益：通过设计，该方案旨在提供高效的数据加密和解密操作，同时减少了管理和维护成本，使得云存储服务更加经济可行。 4. 动态适应性：属性权威机构的灵活性使其能够根据需要实时调整用户权限，适应不断变化的安全需求和业务环境。 5. 隐私保护：用户数据在加密状态下被存储，即使在多权威环境中，也只有授权的用户才能解密，从而保护了用户数据的隐私。总结来说，这篇论文对现有的云存储访问控制机制进行了改进，提出了一种基于多权威CP-ABE的解决方案，旨在提供更安全、灵活且经济的云存储环境，有助于推动云存储技术在实际应用中的发展。"

This article has been accepted for inclusion in a future issue of this journal. Content is final as presented, with the exception of pagination.

WEI et al.: SECURE AND EFFICIENT ATTRIBUTE-BASED ACCESS CONTROL FOR MULTIAUTHORITY CLOUD STORAGE 3

TAB LE I

VERAGE TIMING RESULTS OF OPERATIONS IN PRIME AND

COMPOSITE ORDER GROUPS (UNIT:ms)

Operations Prime order Composite order Ratios

Pairing 5.12 421.43 82.3

Exp. in G 4.21 173.08 42.0

Exp. in G

0.62 31.93 51.5

cryptographic primitives, that is, when a user’s decryption key

is compromised, the adversary can extract the secret key from

it and further combine it with subsequent update keys to access

the encrypted data.

B. Our Contribution

In this paper, we construct a novel multiauthority CP-ABE as

a core building of the proposed multiauthority attribute-based

data access control for cloud storage systems. Speciﬁcally, our

scheme has the following merits.

1) Our scheme supports scalable and dynamic user revoca-

tion, namely, the overhead of revocation is linear in the

logarithm of the number of revoked users, which is more

efﬁcient than the revocation mechanisms in [3]–[5], [9],

and [14], within which the workload of revocation is lin-

ear in the number of users possessing those nonrevoked

attributes.

2) Throughout the life cycle of our system, the system public

parameter remains unchanged, regardless of removing a

user from the system or adding new attributes into the

system.

3) Our scheme enjoys the desired property of public update

in terms of secret key and ciphertext. First, the update key

generated by the authority is available to all users, but

only nonrevoked users can utilize it to update their secret

keys. Second, the cloud server can update the ciphertext

by just using the public parameter of the system, without

the help of the data owner and the authority.

4) With regard to security, our scheme provides both for-

ward security and backward security, that is, a revoked

user cannot access those encrypted data that were pre-

viously accessible for him/her, and also cannot decrypt

those subsequently encrypted data. In addition, we for-

mally prove the security of the proposed multiauthority

CP-ABE scheme.

5) Our scheme is built upon prime order bilinear groups,

which enables the system to be efﬁcient enough for prac-

tical applications. To show its practicality, we implement

it in Charm,

a framework for rapid prototyping of cryp-

tographic primitives.

C. Outline

This paper is structured as follows. In Section II, we intro-

duce the proposed framework of attribute-based data access

control for cloud storage systems. In Section III, we review

the preliminaries used throughout this paper. In Section IV, we

present a concrete construction of multiauthority CP-ABE that

[Online]. Available: http://charm-crypto.com

achieves the intended security requirements of the proposed

framework. In Section V, we implement the proposed scheme

to show its practicability. In Section VI, we discuss the possible

extensions of the proposed scheme. The conclusion is given

in Section VII. In the supplementary ﬁle,

we provide the

corresponding security model, and formally prove the security

of the proposed scheme.

II. F

RAMEWORK OF OUR SYSTEM

A. Overview

In this section, we provide a high-level description of our

framework of multiauthority attribute-based data access control

for cloud storage systems. The system involves the following

entities.

1) Semitrusted third party: It is just in charge of producing

the global public parameter of the system, which is shared

among all authorities and users in the system. Particularly,

it does not keep any s ecret key, and also does not generate

any secret keys for authorities and users. Thus, it makes

no difference on the security of the system.

2) Attribute authority: Each attribute authority indepen-

dently manages its own attribute universe and sets up

its own public parameter and master secret key. It is re-

sponsible for checking the validity of a user’s attributes

belonging to its domain. If yes, it issues a secret key

component to the user according to his/her attributes. In

addition, it is also in charge of periodically generating an

update key for users that are not revoked in its domain.

In our system, any string can be an attribute, and each

attribute belongs to only one authority.

3) Data owner: The data owner is an entity that owns data

and would like to share his/her data by outsourcing them

to cloud servers managed by cloud service providers. A

data owner ﬁrst deﬁnes an intended access policy over

attributes, and enforces it over the data by calling the pro-

posed multiauthority CP-ABE scheme. Then, the owner

sends the encrypted data to cloud servers.

4) User: Each user owns a unique global identiﬁer in the

system, and possesses a set of attributes and the corre-

sponding secret key, which consists of all secret key com-

ponents issued by different attribute authorities (AAs). If

a user is not revoked by an authority at some time period,

he/she can utilize the published update key to update the

corresponding secret key component.

5) Semitrusted cloud server: A cloud server is in charge of

storing and updating those encrypted data from data own-

ers. Here, we emphasize that the update procedure can

be done by just using the public parameter of the sys-

tem (including the global public parameter and the public

parameter of all authorities), without the involvement of

secret information. As in previous works [5], [7], [9], we

assume that it is semitrusted (curious but honest), namely,

it will honestly perform the valid assignments, but will

attempt to learn information about the outsourced data as

much as possible.

Supplemental material for the reader can be downloaded online at

http://ieeexplore.ieee.org/

剩余11页未读，继续阅读

weixin_38631282

粉丝: 5
资源: 923

多机构云存储下的安全高效属性基访问控制

基于属性的访问控制模型及其展望Attribute-Based Access Control Models and Beyond

论文研究-Cooperative Attribute-Based Access Control.pdf

Unbounded HIBE and Attribute-Based Encryption

php实现rbac权限

RBAC、ABAC、PBAC、ABAB访问控

BETHENCOURT J, SAHAI A, WATERS B. Ciphertext-policy attribute-based encryption[C]

如何做到对Web系统中的资源和功能进行访问控制

文献名称BETHENCOURT J, SAHAI A, WATERS B. Ciphertext-policy attribute-based encryption[C]

基于属性的访问控制模型ABAC

列举和rbac一样的主流权限系统

最新资源