基于属性加密的雾协同云数据共享方案

Fog-assisted cloud data sharing scheme based on attribute-based encryption

为解决现有的属性加密数据共享方案粗粒度和开销大等问题,提出一种能保证数据隐私且访问控制灵活的雾协同云数据共享方案(FAC-ABE)。设计属性加密机制,将数据的访问控制策略分为个性化和专业化两种。通过个性化的访问策略,根据用户的经验和偏好,将数据共享给相应的云端。利用雾节点对数据分类,将共享的数据分流,保障数据共享给专业的云服务器。安全分析结果表明,该方案能保障数据机密性,实现更细粒度的访问控制。实验结果表明,用户能将加密开销转移到雾节点上,降低了云端用户开销。

To solve the problem of the coarse granularity and large overhead of the existing data sharing scheme using attribute-based encrypted,a fog-assisted cloud data sharing scheme based on ABE(FAC-ABE)that guaranteed the data privacy and the flexible access control was proposed.The ABE mechanism was designed to divide the data access control strategy into persona-lized type and specialized type in the scheme.Through a personalized access strategy,the data were shared to the corresponding cloud based on the user’s experience and preferences.The fog node was used to classify the sharing data and they were shunted to a professional cloud server.The security analysis shows that the proposed scheme can achieve the finer-grained access control.Experimental analysis shows that the user can transfer the encryption overhead to the fog node,which reduces users’overhead.