支持组用户授权管理的共享数据完整性验证方案

Integrity Verification Scheme for Shared Data Enabling Group User Authorization Management

本文旨在解决共享医疗数据场景下的群组用户授权管理与完整性验证问题.首先,为防止群组用户越权操作,引入授权标识符,医疗数据持有者凭授权标识符,结合用户身份完成权限分配;而授权标识符的数学构造可有效保证其不可伪造性.其次,为记录撤销用户并剥夺其访问权限,引入基于跳表设计的撤销用户表;跳表的快速查找和插入的特性,使方案撤销用户的开销仅为O(logn).随后,完善了共享数据完整性验证的具体流程与数学设计.最后通过安全性分析和仿真实验证明了方案的安全性和高效性.

This study is designed to address the issues of group user authorization management and integrity verification for shared medical data.First,to prevent group users from overstepping their authority,authorization identifiers are introduced.Medical data owners use authorization identifiers to allocate different access rights to group users,according to user identities.The mathematical construction of authorization identifiers effectively ensures that it cannot be forged.Second,to record revoked users and deprive them of access rights,a revoked user list based on a skip list is introduced.As skip list can support fast lookup and insertion,the overhead of revoking a user is only O(logn).Afterward,the concrete process and mathematical design of shared data integrity verification are improved.Finally,the security analysis and simulation experiments prove the security and efficiency of the scheme.