摘要
针对云存储服务中用户访问权限撤销计算与带宽代价过大、复杂度过高等问题。以密文策略的属性加密体制(CP-ABE)的密文访问控制方案作为理论背景,设计出一种基于动态重加密的云存储权限撤销优化机制,即DR-PRO。该机制利用(k,n)门限方案,将数据信息划分成若干块,动态地选取某一数据信息块实现重加密,依次通过数据划分、重构、传输、提取以及权限撤销等子算法完成用户访问权限撤销实现过程。通过理论分析与模拟实验评估表明,在保证云存储服务用户数据高安全性的前提下,DR-PRO机制有效降低了用户访问权限撤销的计算与带宽代价,其性能效率得到了进一步优化与提高。
In order to effectively solve overhead computing and bandwidth, high complexity problems about user access privileges revoking of cloud-storage service. A cloud-storage privilege revoking optimizing mechanism was designed （DR-PRO） based on Dynamic re-encryption. Firstly, DR-PRO used （ k, n） threshold algorithm of secret sharing scheme, the data information was divided into a number of blocks, and achieved re-encryption to a data block. Secondly, successively achieved user access privilege revoking by data cutting, data reconstructing, data publishing, data extracting and data revoking sub-algorithms, theoretical analysis and experimental evaluation showed, DR-PRO ensured high data security, effectively reduced the computing and bandwidth overhead, and further optimized and improved the performance.
出处
《科学技术与工程》
北大核心
2015年第20期108-115,共8页
Science Technology and Engineering
基金
国家自然科学基金(61272511)资助
