一种高效多授权中心云访问控制方案

High Efficiency Multi-authority Cloud Access Control Scheme

针对已有云计算多授权访问控制方案中用户端负担过重的问题,提出一种基于属性加密的多授权中心访问控制方案HE-MA-ACS。在层次化授权结构的基础上,引入外包解密思想,将用户访问的大部分解密计算开销外包至云服务端,实现细粒度的属性撤销,并且用户端不需要参与属性的撤销操作。对方案的正确性、安全性、计算和存储性能进行了分析,证明了该方案在用户端存储开销、访问通信开销、解密时间及属性撤销时计算开销上的优越性。该方案有效地降低了用户端的负担,提高了解密效率。

For solving the overhead problems of users in the multi-authority access control schemes, a HE-MA-ACS scheme was proposed. Outsourced decryption is introduced based on the hierarchical authorization structure, so large part of the decryption overhead is moved to the CSP. Furthermore,fine-grained attribute revocation is achieved and the users can not participate in the operation when their attributes are revoked. The correctness, security, calculated and storage performance were analyzed. Experimental results demonstrate the superiority of overhead in user storage, access communication, decryption and the computation costs when attribute is revoked as well. The scheme effectively reduces the burden on the user side and improves the efficiency of decryption.