一种支持属性撤销的ABE高效数据共享方案

摘要

随着云计算的流行,越来越多的敏感数据存储在云端并通过Internet实现数据共享,与此同时也带来了很多安全问题. 针对这一问题,提出一种基于CP-ABE的高效数据共享方案. 该方案是一种非常适用于外包数据的细粒度访问控制加密方案,可用于解决云存储中的一些安全问题. 采用只有与门的访问结构,以属性作为公钥,能够表示属性在与门中正、非和无关紧要3种情况,将密文与用户私钥属性相关联,支持代理重加密技术,能够灵活表示访问控制策略的同时减轻授权机构的负担,并能够实现用户属性的即时撤销和高效解密.%With the popular of cloud computing , more and more sensitive data are stored on cloud and it can easily be shared over the Internet.At the same time, the problems of security come.To counter this problem, this paper proposes an effectual way for data shared based on CP-ABE.This encryption scheme is very applicable to fine-grained access controls of outsourced database , and can be used to solve some safety problems of cloud usage .In this paper , we use the access structure with only AND gates and make attributes as public key .Every attribute can express three different situations , including positive, negative, and irrelevant, in AND gate.In particular, It associates ciphertext with user''s private key properties, supporting proxy re-encryption.Based on the above , this proposed scheme can also have high flexibility in representing access control policy and reduce the burden of au -thorized agency .In addition , it implemented instant revoking of user properties and efficient decryption .