信任实体与ABE密码体制相结合的云存储加密模型

Cloud Storage Encryption Model based on Trust-entity Combined with ABE

为了实现云存储加密数据快速检索及确保数据存储和传送的安全,提出了一种云计算环境下基于信任实体与ABE密钥体制相结合的云存储加密模型。在分析现有云存储加密技术面临问题的基础上,将ABE密钥体制中非对称公私密钥对模型,结合介于数据提供者、云服务器和云用户三者都信任的第三方机构来实现云存储加密设计,给出了云中数据在存储和传送中的访问控制流程。该模型对云存储密钥由谁控制、在哪儿管理进行了重新界定,保证了云存储环境下数据的安全性和可靠性,并且具有较好的灵活性。

With the increase of user data in the cloud storage, and the characteristics of cloud computing such as ＂controllable trust domain＂ ceasing to exist, sharing, dynamic and openness ,the authors proposes an access control, whic is more complicated in cloud computing environment than it in traditional one. In order to achieve rapid retrieval and guarantee the security and reliability of cloud storage encryption data in the accessing process, this paper puts forward a kind of cloud storage encryption model based on a trust entity combined with ABE key system. On the analysis of the existing cloud storage encryption models which are facing with the problem,choosing a public-private key pair model from the ABE key system, the authors combine it with the third party which is trusted by the data provider, the cloud and cloud users, and give users the implementation process access to the cloud data. This model redefines the relationship between the subject and object in the cloud storage, ensures the data security and reliability of the cloud computing environment, and has good flexibility.