一种云环境下用户隐私数据分类加密方案研究与实现

Scheme for privacy classification encryption to protect user data in cloud computing

文中针对云环境下用户隐私数据的安全性和数据应用操作效率要求相矛盾的问题,提出一种基于同态加密和密钥策略基于属性的加密(Ciphertext-Policy Attributed-Based Encryption,CP-ABE)混合加密方案,实现了对云用户隐私信息分类加密保护。方案中将云用户隐私数据分为绝对保密的A类和可被部分可信用户合理访问的B类两种,其中A类数据进行同态方法加密,确保重要的隐私不容易被窃取;对B类数据使用CP-ABE算法进行加密,并制定访问控制树,确保可信用户进行合理访问。实验结果表明,通过基于不同类别的加密方案,使得云用户的数据共享更加安全便捷,混合方案更贴近用户需求。

Due to the paradox between the security of user privacy data and the efficiency of application operation,a scheme combined the homomorphic encryption with the CP-ABE encryption is proposed.Firstly,the user privacy is divided into A-class and B-class. The A-class privacy is strictly private data and the B-class privacy can be visited by other trusted users. The homomorphic encryption is used for the A-class privacy to ensure the important data which cannot be visited. Then,CP-ABE encryption is used for the B-class privacy and the access control tree which can be visited is built. Experimental results show that the different encryption policies for different privacies could make the cloud user data safer and the combined solution is close to the user requirements.