ACCESS CONTROL SYSTEM AND ACCESS CONTROL METHOD THEREOF FOR CLOUD STORAGE SERVICE PLATFORM

摘要

The invention relates to the field of information security in cloud services. Provided are an access control system and access control method thereof for a cloud storage service platform. The system and method are based on a weighted attribute encryption scheme, and adopt multi-authority attribute-based encryption to encrypt data and store the encrypted data in a cloud storage service platform so as to increase security of a cloud storage service. The invention combines an attribute with a weight to realize a ranking management of a user attribute, so that users having a same attribute but at different ranks have different access authorities, thereby realizing a more flexible and precise access control. Moreover, the system and method adopt multi-authority attribute-based encryption to prevent a single authentication center from having over-centralized authority, thereby increasing the security of the cloud storage service. The system and method are particularly suitable to be deployed in an OSS platform, thereby ensuring confidentiality of data stored therein by a user, and implementing a more precise access control over data sharing.