發(fā)布時(shí)間：2018-02-11 09:01

  本文關(guān)鍵詞： 云存儲(chǔ)安全 屬性加密機(jī)制 數(shù)字信封 動(dòng)態(tài)口令　出處：《計(jì)算機(jī)應(yīng)用與軟件》2016年09期 　論文類型：期刊論文

【摘要】：為了高效地實(shí)現(xiàn)云端數(shù)據(jù)的存儲(chǔ)和傳輸安全,提出一種結(jié)合數(shù)字信封技術(shù)的改進(jìn)的密文策略的屬性加密機(jī)制(CPABE)云存儲(chǔ)安全模型。該模型在不影響云服務(wù)性能的前提下保護(hù)用戶的敏感數(shù)據(jù),在數(shù)據(jù)未上傳至云端前對(duì)數(shù)據(jù)進(jìn)行本地加密;加密密鑰通過CP-ABE機(jī)制以保證密鑰不會(huì)被非法用戶獲取,并通過數(shù)字信封技術(shù)確保數(shù)據(jù)在傳輸過程中的完整性和保密性。新模型還結(jié)合動(dòng)態(tài)口令(OTP)對(duì)用戶進(jìn)行登錄校驗(yàn),從而有效阻止非授權(quán)用戶對(duì)數(shù)據(jù)的訪問。仿真實(shí)驗(yàn)表明,改進(jìn)的模型能夠安全有效地保護(hù)用戶的機(jī)密數(shù)據(jù),阻止惡意用戶對(duì)云服務(wù)器的非法訪問。通過和現(xiàn)有云存儲(chǔ)安全方案進(jìn)行時(shí)間性能對(duì)比,改進(jìn)的CP-ABE方案加密效率和安全性能有較大幅度提高。
[Abstract]:In order to realize the storage and transmission security of cloud data efficiently, In this paper, an improved attribute encryption mechanism of ciphertext policy based on digital envelope technology, named CPABE-based cloud storage security model, is proposed, which protects the sensitive data of users without affecting the performance of cloud services. The data is encrypted locally before the data is uploaded to the cloud; the encryption key is used through the CP-ABE mechanism to ensure that the key will not be obtained by the illegal user. The digital envelope technology is used to ensure the integrity and confidentiality of the data in the transmission process. The new model also uses dynamic password and OTPto to verify the user's login, thus effectively preventing unauthorized users from accessing the data. The simulation results show that, The improved model can protect the confidential data of users safely and effectively, and prevent malicious users from accessing the cloud server illegally. The encryption efficiency and security performance of the improved CP-ABE scheme are greatly improved.
【作者單位】： 江西理工大學(xué)信息工程學(xué)院;
【基金】：國(guó)家自然科學(xué)基金項(xiàng)目(11062002,61363076) 江西省教育廳重點(diǎn)科技項(xiàng)目(GJJ13435,GJJ14465) 江西省自然科學(xué)基金項(xiàng)目(20142BAB207020)
【分類號(hào)】：TP309;TP333
，

本文編號(hào)：1502679