As cloud storage technology attracts more and more attention
Security in cloud storage is now the biggest obstacle of cloud computing promotion. This paper proposes a new access control scheme in cloud. According to the characteristics of the users
they are classified as private users and public users. Use different ways to share the files and achieve the revocation of users. The sharing of files to public users adopts a multi-authority solution to reduce the burden of authorities and the risk of leaking information. Finally
analyze the security of the scheme and compare the efficiency of this scheme with those of other schemes. The results show that the proposed scheme can effectively solve the security problem in cloud storage.
关键词
Keywords
references
Vimercati S D C D, Foresti S, Jajodia S, et al. Over-encryption: management of access control evolution on outsourced data[C]// Proc. of International Conference on Very Large Data Bases. VLDB Endowment, 2007: 123-134.
Matsuda T, Nishimaki R, Tanaka K. CCA proxy re-encryption without bilinear maps in the standard model[C]// Proc. of International Conference on Practice and Theory in Public Key Cryptography. Springer-Verlag, 2010: 261-278.
Narayan S, Safavi-Naini R. Privacy preserving EHR system using attribute-based infrastructure[C]// Proc. of ACM Cloud Computing Security Workshop, Ccsw 2010, Chicago, 2010: 47-52.
Ruj S, Nayak A, Stojmenovic I. DACC: Distributed access control in clouds[C]// Proc. of IEEE International Conference on Trust, Security and Privacy in Computing and Communications. IEEE, 2011: 91-98.
Benaloh J, Chase M, Horvitz E, et al. Patient controlled encryption: ensuring privacy of electronic medical records[C]// Proc. of ACM Cloud Computing Security Workshop, Ccsw 2009, Chicago, Il, Usa, November. DBLP, 2009: 103-114.
Yu S, Wang C, Ren K, et al. Attribute based data sharing with attribute revocation[C]// Proc. of ACM Symposium on Information, Computer and Communications Security, ASIACCS 2010. Beijing, China, 2010: 261-270.
Zhang Y, Chen X, Li J, et al. Anonymous attribute-based encryption supporting efficient decryption test[C]// Proc. of ACM Sigsac Symposium on Information, Computer and Communications Security. ACM, 2013: 511-516.
Jung T, Li X Y, Wan Z, et al. Privacy preserving cloud data access with multi-authorities[C]// Proc. of IEEE INFOCOM. IEEE, 2013: 2625-2633.
Yu S, Wang C, Ren K, et al. Achieving secure, scalable, and fine-grained data access control in cloud computing[C]// Proc. of IEEE Conference on Information Communications. IEEE, 2010: 534-542.
Hur J, Noh D K. Attribute-based access control with efficient revocation in data outsourcing systems[J]. IEEE Transactions on Parallel % Distributed Systems, 2011, 22(7): 1214-1221. DOI: 1214
Frikken K, Atallah M, Li J. Attribute-based access control with hidden policies and hidden credentials[J]. IEEE Transactions on Computers, 2012, 55(10): 1259-1270. DOI: 1259