ACCESS CONTROL METHOD ORIENTED TO CLOUD STORAGE SERVICE PLATFORM AND SYSTEM THEREOF

摘要

The present invention relates to the field of cloud storage service technology, and provided are an access control system oriented to a cloud storage service platform and an access control method therefor. In the method and system, a data owner, on the basis of an attribute encryption mechanism, encrypting user data needing to be uploaded and then storing in a cloud storage service platform, thereby being able to carry out effective privacy protection for shared data in the cloud storage service platform and improving security of cloud storage service. Meanwhile, since most of the decryption operations are outsourced to a third party, the burden of decryption of a data user is visibly reduced, thereby achieving a goal of allowing the user to quickly decrypt. In addition, while a cleartext is encrypted in an encryption phase, the cleartext is signed so that the data user may verify correctness of the cleartext obtained by the decryption, thereby preventing possible tampering of the cleartext or ciphertext by the cloud server and the third party and improving security of the entire program.