一种基于Fabric区块链的云端数据动态访问控制方案

A Dynamic Access Control Scheme for Cloud Data Based on Fabric Blockchain

【目的】云端存储数据的安全性是用户使用云存储服务的重要条件,一般用户与云服务提供商之间需要相互信任,而中心化的云服务器存在单点故障问题并且云端的数据存在泄露、丢失的风险。【方法】为解决上述问题,提出了一种基于Fabric区块链的云端数据动态访问控制方案。【结果】方案利用区块链难以篡改的特性解决了用户与云端的信任问题,使用去中心化云存储解决了云服务器的单点故障问题,利用智能合约实现了方案的自动执行,并采用属性基加密的方式实现了对云端数据的动态访问控制。【结论】通过对方案的安全分析与实验验证,方案具有良好的安全性与可用性。

[Objective]The security of cloud storage is an important condition for users to use cloud storage services.Generally,mutual trust is required between users and cloud service providers,but centralized cloud servers have a single point of failure problem and cloud data has the risk of leakage and loss.[Methods]In order to solve the above problems,a dynamic access control scheme for cloud data based on Fabric blockchain is proposed.[Results]The scheme solves the trust problem between users and the cloud by using the characteristics of blockchains that are difficult to tamper with.The scheme also uses decentralized cloud storage to solve the single point of failure problem of cloud servers,uses smart contracts to realize the automatic execution of the solution,and uses attribute-based encryption to realize dynamic access control to cloud data.[Conclusions]Through the security analysis and experimental verification of the scheme,the scheme has shown good security and usability.