基于可截取签名和属性加密的云存储访问控制方案

现有的云存储访问控制方案只能根据用户属性的不同发送不同的消息,因而消息利用率不高。针对这一缺陷,首先设计了一个基于ElGamal的可截取签名方案,然后基于该可截取签名方案结合属性加密体制提出了一种新的云存储访问控制方案。新方案在实现数据加密的同时,提供了细粒度的访问控制,将符合属性的子消息发送给相应的用户,提高了消息的利用率,具有更强的应用性。

An access control scheme in cloud storage based on content extraction signature and attribute encryption

Existing access control schemes in cloud storage can only send different messages according to users’ attributes, which leads to low utilization rate. In order to overcome this shortcoming, firstly, we design a content extraction signature scheme based on ElGamal; secondly, we propose a new access control scheme in cloud storage based on content extraction signature and attribute encryption system. The proposed scheme combines access control with attribute encryption and realizes fine grained access control at the same time. The scheme can send sub messages to corresponding users depending on users’ attributes; it improves the utilization of the message and has better applicability.