DIFC-AC:一种云计算中信息隐私性保护方法

DIFC-AC: INFORMATION PRIVACY PROTECTION FOR CLOUD COMPUTING SYSTEM

随着云计算这种新的网络计算模式的普及,云用户信息隐私性保护问题成为云计算领域亟待解决的重要问题。当用户将数据上传到云服务器端,用户就不再能保证其数据受到保护。为了让用户对上传到云上的数据进行自主的授权和控制,提出一种基于分布式信息流控制的访问控制方法 DIFC-AC,其核心思想是采用安全标签来跟踪数据的流动,数据所有者通过在标签中设置授权条件来控制进程对该数据的访问权限。提出DIFC-AC原型系统的设计与实现,DIFC-AC保证用户数据在服务器端的整个生命周期的隐私性。性能测试数据显示DIFC-AC原型系统的性能开销能够控制在合理范围之内。

With the permeation of cloud computing,this new networks computation mode also raises the information privacy protection issue,which becomes an important problem to be urgently resolved in cloud computing field.Once the data is uploaded to the cloud server,users are no longer to be able to guarantee the data is protected.In order to allow users to autonomously authorise and control the data uploaded to the cloud,we present DIFC-AC,an access control method based on decentralised information flow control model.The core idea of DIFC-AC is to use security labels to track data flows.Data owners control the access privileges of the process on the data by setting control conditions on the labels.The design and implementation of a prototype system of DIFC-AC is presented.DIFC-AC ensures the user data privacy on the server throughout the life-time.Performance evaluation data shows that the prototype system imposes reasonably low runtime overhead.