In cloud,data access control is a crucial way to ensure data security.Functional encryption(FE) is a novel cryptographic primitive supporting fine-grained access control of encrypted data in cloud.In FE,every cipherte...In cloud,data access control is a crucial way to ensure data security.Functional encryption(FE) is a novel cryptographic primitive supporting fine-grained access control of encrypted data in cloud.In FE,every ciphertext is specified with an access policy,a decryptor can access the data if and only if his secret key matches with the access policy.However,the FE cannot be directly applied to construct access control scheme due to the exposure of the access policy which may contain sensitive information.In this paper,we deal with the policy privacy issue and present a mechanism named multi-authority vector policy(MAVP) which provides hidden and expressive access policy for FE.Firstly,each access policy is encoded as a matrix and decryptors can only obtain the matched result from the matrix in MAVP.Then,we design a novel function encryption scheme based on the multi-authority spatial policy(MAVPFE),which can support privacy-preserving yet non-monotone access policy.Moreover,we greatly improve the efficiency of encryption and decryption in MAVP-FE by shifting the major computation of clients to the outsourced server.Finally,the security and performance analysis show that our MAVP-FE is secure and efficient in practice.展开更多
2007年10月13日，由河北沧州供电公司负责完成的“四级信息网完善”项目通过专家评审。四级信息网络以光纤为传输介质，采用IP OVER OPTICAL技术，组成了全面覆盖220千伏变电站及县级供电企业的千兆信息网络。在县级供电企业与变电站网...2007年10月13日，由河北沧州供电公司负责完成的“四级信息网完善”项目通过专家评审。四级信息网络以光纤为传输介质，采用IP OVER OPTICAL技术，组成了全面覆盖220千伏变电站及县级供电企业的千兆信息网络。在县级供电企业与变电站网络之间采用高性能防火墙和严格的网络安全访问控制策略，很好地解决了县级供电企业信息网络与公司信息网络的安全隔离，安全防护措施完备，策略得当。展开更多
基金supported by the National Science Foundation of China (No.61373040,No.61173137)The Ph.D.Pro-grams Foundation of Ministry of Education of China(20120141110073)Key Project of Natural Science Foundation of Hubei Province (No.2010CDA004)
文摘In cloud,data access control is a crucial way to ensure data security.Functional encryption(FE) is a novel cryptographic primitive supporting fine-grained access control of encrypted data in cloud.In FE,every ciphertext is specified with an access policy,a decryptor can access the data if and only if his secret key matches with the access policy.However,the FE cannot be directly applied to construct access control scheme due to the exposure of the access policy which may contain sensitive information.In this paper,we deal with the policy privacy issue and present a mechanism named multi-authority vector policy(MAVP) which provides hidden and expressive access policy for FE.Firstly,each access policy is encoded as a matrix and decryptors can only obtain the matched result from the matrix in MAVP.Then,we design a novel function encryption scheme based on the multi-authority spatial policy(MAVPFE),which can support privacy-preserving yet non-monotone access policy.Moreover,we greatly improve the efficiency of encryption and decryption in MAVP-FE by shifting the major computation of clients to the outsourced server.Finally,the security and performance analysis show that our MAVP-FE is secure and efficient in practice.
文摘2007年10月13日，由河北沧州供电公司负责完成的“四级信息网完善”项目通过专家评审。四级信息网络以光纤为传输介质，采用IP OVER OPTICAL技术，组成了全面覆盖220千伏变电站及县级供电企业的千兆信息网络。在县级供电企业与变电站网络之间采用高性能防火墙和严格的网络安全访问控制策略，很好地解决了县级供电企业信息网络与公司信息网络的安全隔离，安全防护措施完备，策略得当。
