工业互联网中增强安全的云存储数据访问控制方案

Security-enhanced data access control for multi-authority cloud storage in industrial Internet

在工业互联网应用中,由于异构节点计算和存储能力的差异,通常采用云方案提供数据存储和数据访问服务。云存储中的访问控制如扩展多权限的云存储数据访问控制方案(NEDAC-MACS),是保证云存储中数据的安全和数据隐私的基石。给出了一种攻击方法来证明NEDAC_MACS中,被撤销的用户仍然可以解密NEDAC-MACS中的新密文;并提出了一种增强NEDAC-MACS安全性的方案,该方案可以抵抗云服务器和用户之间的合谋攻击;最后通过形式密码分析和性能分析表明,该方案能够抵抗未授权用户之间以及云服务器与用户之间的合谋攻击,保证前向安全性、后向安全性和数据保密性。

In the application of industrial Internet,due to the differences in computing and storage capabilities of heterogeneous nodes,cloud solutions are generally used to provide data storage and data access services.Access control in cloud storage,such as an extended data access control scheme for multi-authority cloud storage(NEDAC-MACS),is the cornerstone to ensure the security and privacy of data in cloud storage.This paper gave an attack method to demonstrate that a revoked user could still decrypt new ciphertexts in NEDAC-MACS and proposed a scheme to enhance the security of NEDAC-MACS,which could resist the collusion attack between cloud server and users.Finally,formal cryptanalysis and performance analysis show that the scheme can resist collusion attacks between unauthorized users and between cloud servers and users,and ensure forward security,backward security and data confidentiality.