基于服务商再加密机制的DaaS访问控制方案

Access control scheme in DaaS based on database provider re-encryption mechanism

为增强DaaS的隐私保护,给出了DaaS中数据隐私的定义并将其作为授权的基本单位,基于数据隐私定义对关系数据表进行了形式化定义,基于DaaS服务框架提出了一种基于双线性映射的DaaS提供商再加密机制,将该机制与访问控制策略结合,设计了DaaS下保护隐私的访问控制方案,并分析了该方案的正确性与安全性。新方案不仅实现了服务提供者对委托密文数据细粒度、灵活的访问控制管理,还可有效地防止用户与服务提供商的合谋攻击。

To enforce the privacy preserving in DaaS,the concept of data privacy in DaaS is presented as the basic unit of access control management which will be authorized and a formal definition of the relational data table based on data privacy definition is given.Then the DaaS provider re-encryption mechanism with bilinear map is constructed based on the DaaS service framework.By combining the proposed mechanism with access control policy,a privacy preserving access control schema in DaaS is designed.Finally,the correctness and security of the new access control schema is analyzed.The new schema no only achieves flexible and fine-grained access control,but also effectively resists conspiracy attack and protects the privacy of data owner and data request.