基于MAH-ABE的云计算隐私保护访问控制

摘要

For solving security and privacy problems ,a novel access control model-multiple and hierarchical attribute-based encryption (MAH-ABE) based on the ciphertext-policy attribute-based encryption (CP-ABE) is proposed .In this model ,the do-main has been divided into public and private ones ,private domain is managed with CP-ABE scheme ,while public domain adopts multiple and hierarchical trust authorities to manage attributes and keys to help reduce the complexity of key management .A new concept called “expiration time” is created to deal with attribute revocation with high efficiency .Finally ,security and performance analysis is provided to demonstrate that the model is scalable ,flexible ,fine-grained and secure in cloud computing environment .%针对云计算环境下的安全性和隐私性问题，在 CP-ABE 的基础上提出 MAH-ABE （Multiple and Hierarchi-cal Attribute Based Encryption）访问控制模型，划分了公共领域和私人领域，私人领域采用 CP ，ABE 密文访问控制，公共领域采用等级多信任机构来管理属性和密钥，减少了管理复杂度。同时，该模型引入失效时间属性来执行属性更新操作。最后给出模型的安全性证明和仿真，表明该模型是高效灵活，细粒度并且安全的。