[1]江艳惠,胡学先,陈 越,等.基于多机构属性加密的云数据确定性删除方案[J].计算机技术与发展,2024,34(01):91-98.[doi:10. 3969 / j. issn. 1673-629X. 2024. 01. 014]
　JIANG Yan-hui,HU Xue-xian,CHEN Yue,et al.Assured Data Deletion with Multi-authority Attribute-based Encryption for Cloud Data[J].,2024,34(01):91-98.[doi:10. 3969 / j. issn. 1673-629X. 2024. 01. 014]

点击复制

基于多机构属性加密的云数据确定性删除方案()

《计算机技术与发展》[ISSN:1006-6977/CN:61-1281/TN]

卷:

34

期数:

2024年01期

页码:

91-98

栏目:

网络空间安全

出版日期:

2024-01-10

文章信息/Info

Title:

Assured Data Deletion with Multi-authority Attribute-based Encryption for Cloud Data

文章编号:

1673-629X(2024)01-0091-08

作者:

江艳惠¹; 2 ; 胡学先² ; 陈 越² ; 郝增航²

1. 郑州大学 网络空间安全学院,河南 郑州 450002;

2. 中国人民解放军战略支援部队信息工程大学,河南 郑州 450001

Author(s):

JIANG Yan-hui1; 2 ; HU Xue-xian2 ; CHEN Yue2 ; HAO Zeng-hang2

1. School of Cyber Science and Engineering,Zhengzhou University,Zhengzhou 450002,China;

2. The PLA Strategic Support Force Information Engineering University,Zhengzhou 450001,China

关键词:

云存储; 确定性删除; 多机构属性基加密; 区块链; 策略隐藏

Keywords:

cloud storage; assured deletion; multi-authority attribute-based encryption; blockchain; policy hidden

分类号:

TP309

DOI:

10. 3969 / j. issn. 1673-629X. 2024. 01. 014

摘要:

云存储服务的使用越来越普遍,但是将大量数据存储在第三方云服务器中,给用户带来便利的同时也提出了更高的安全要求。 由于云存储服务是半可信的,使得如何确定性删除云存储数

据成为需要解决的问题。 目前,云存储数据的确定性删除的相关研究大多基于单机构管理属性的属性基加密,该类方案虽然满足云数据的细粒度访问控制,但容易引起单点故障等问题。 因此,提出一种基于多机构属性基加密的云存储数据确定性删除方案。 将多机构属性基加密应用于该方案,不仅支持有多个机构管理属性时对云存储数据的安全删除,并实现了云数据的

细粒度访问。 此外,该方案通过利用策略隐藏保护存储在云服务器中的访问策略的隐私。 最后,通过撤销属性改变密文实现云数据删除,并通过区块链存储删除证明实现删除结果公开可验证和责任可追溯。 实验仿真和对比分析表明,该方案在云存储数据删除方面具有较高的安全性,为云储存数据的删除提供一种实用方案。

Abstract:

The use of cloud storage services is becoming more and more common,but a large amount of data is saved in the third-partycloud server,which brings convenience to users but?

also puts forward higher security requirements. Since the cloud storage service is semi-trusted,how to delete cloud storage data deterministically becomes a problem that needs?

to be solved. At present,most of the research onassured deletion of cloud storage data is based on attribute - based encryption of single authority management attributes. Although thiskind of solution meets the fine - grained access control of cloud data, it is easy to cause single point of failure and other problems.Therefore,,we propose a cloud storage data assured deletion scheme based on multi - authority attribute - based encryption. Theapplication of multi-authority attribute-based encryption in this scheme not only supports the secure deletion of cloud storage data whenthere are multiple authority to manage attributes,but also realizes fine-grained access to cloud data. In addition,this scheme protects theprivacy of access policies stored in the cloud server by using policy hiding. Finally, cloud data deletion is realized by changing theciphertext through revocation attributes,and the deletion result is publicly verifiable and responsibility traceable through the blockchainstorage deletion proof. Experimental simulation and comparative analysis show that the proposed scheme has high security in cloudstorage data deletion,and provides a practical scheme for cloud storage data deletion.

常用功能