论文部分内容阅读
针对云存储服务中用户访问权限撤销计算与带宽代价过大、复杂度过高等问题,以密文策略的属性加密体制(CP-ABE)的密文访问控制方案作为理论背景,设计出一种基于动态重加密的云存储权限撤销优化机制,即DR-PRO。该机制利用(k,n)门限方案,将数据信息划分成若干块,动态地选取某一数据信息块实现重加密,依次通过数据划分、重构、传输、提取以及权限撤销等子算法完成用户访问权限撤销实现过程。通过理论分析与模拟实验评估表明,在保证云存储服务用户数据高安全性的前提下,DR-PRO机制有效降低了用户访问权限撤销的计算与带宽代价,其性能效率得到了进一步优化与提高。
In order to solve the problem that the user access rights in the cloud storage service are withdrawn and the cost of bandwidth is too large and the complexity is too high, a ciphertext-based access control scheme of ciphertext-based attribute attribution system (CP-ABE) is taken as the theoretical background. Dynamic re-encryption of cloud storage rights revocation optimization mechanism, that is, DR-PRO. The mechanism uses the (k, n) threshold scheme to divide the data into several blocks, dynamically select a certain data block for re-encryption, and then complete the sub-algorithms such as data partitioning, reconstruction, transmission, extraction and authorization revocation Access to withdraw the implementation process. Theoretical analysis and simulation experiments show that the DR-PRO mechanism can effectively reduce the computational and bandwidth cost of user access revocation and optimize and improve the performance efficiency of the cloud storage service user data under the premise of high security.