基于全同态加密的云数据安全方案研究

Application of Homomorphic Encryption Based on Cloud Computing Security

同态加密可以在加密后的数据上直接操作,其结果解密后与直接对明文进行操作的结果一样。把同态加密应用到云中,可以有效解决当前云大部分安全问题。本文提出一种融合代理重加密和同态加密的云数据分享方案:首先利用PKI完成数据所有者和用户的身份认证及密钥的产生和分发工作;数据所有者对数据进行特征划分,再引入代理重加密机制,利用RSA乘法同态的特性实现对加密数据进行授权访问控制。

Homomorphic encryption can process the homomorphic encrypted data directly, and after decrypting the processed result, they can get the same thing that was directly processed from plaintext. Application of homomorphic encryption in cloud computing can effectively solve most security problems of current cloud computing. In this paper, a secure scheme for cloud data which is based on proxy re-encryption mechanism and homomorphic encryption is proposed. Firstly, the scheme introduced one mature technique-PKI. PKI analyzed the data owner and the user＇s identity authentication, and then produced and distributed keys. Secondly, data owners extracted characteristics of data and produced access feature vector. Then it introduced proxy re-encryption mechanism to realize the encrypted data access control by using the properties of the RSA multiplicative homomorphism.