Journal of Computer Applications ›› 2018, Vol. 38 ›› Issue (2): 348-351.DOI: 10.11772/j.issn.1001-9081.2017071856

Previous Articles     Next Articles

Data updating method for cloud storage based on ciphertext-policy attribute-based encryption

LIU Rong1, PAN Hongzhi1, LIU Bo1, ZU Ting1, FANG Qun1,2, HE Xin1,2, WANG Yang1,2   

  1. 1. School of Mathematics & Computer Science, Anhui Normal University, Wuhu Anhui 241002, China;
    2. Anhui Key Laboratory of Network & Information Security, Anhui Normal University, Wuhu Anhui 241002, China
  • Received:2017-07-31 Revised:2017-09-07 Online:2018-02-10 Published:2018-02-10
  • Supported by:
    This work is partially supported by the Natural Science Foundation of Anhui Province (1708085MF156), the Major Humanities and Social Science Foundation of Anhui Province (SK2014ZD033).

基于密文策略属性基加密算法的云存储数据更新方法

刘荣1, 潘洪志1, 刘波1, 祖婷1, 方群1,2, 何昕1,2, 王杨1,2   

  1. 1. 安徽师范大学 数学计算机科学学院, 安徽 芜湖 241002;
    2. 安徽师范大学 网络与信息安全安徽省重点实验室, 安徽 芜湖 241002
  • 通讯作者: 刘荣
  • 作者简介:刘荣(1991-),女,安徽安庆人,硕士研究生,主要研究方向:网络信息安全;潘洪志(1991-),男,安徽安庆人,硕士研究生,主要研究方向:网络信息安全;刘波(1992-),男,安徽阜阳人,硕士研究生,主要研究方向:网络信息安全;祖婷(1991-),女,安徽安庆人,硕士,主要研究方向:网络信息安全;方群(1972-),男,安徽寿县人,教授,博士,CCF会员,主要研究方向:可信计算、网络信息安全;何昕(1986-),男,安徽安庆人,讲师,博士,CCF会员,主要研究方向:无线通信网络、网络信息论;王杨(1973-),男,安徽灵璧人,教授,博士,CCF会员,主要研究方向:数据安全。
  • 基金资助:
    安徽省自然科学基金资助项目(1708085MF156);安徽省重大人文社科基金资助项目(SK2014ZD033)。

Abstract: Cloud computing data are vulnerable to be theft illegally and tampered maliciously. To solve these problems, a Dynamic Updating Ciphertext-Policy Attribute-Based Encryption (DU-CPABE) scheme which enables both data dynamic updating and security protection was proposed. Firstly, by using linear partitioning algorithm, data information was divided into fixed size blocks. Secondly, the data blocks were encrypted by using Ciphertext-Policy Attribute-Based Encryption (CP-ABE) algorithm. Finally, based on conventional Merkle Hash Tree (MHT), an Address-MHT (A-MHT) was proposed for the operation of dynamically updating data in cloud computing. The theoretical analysis proved the security of the scheme, and the simulation in ideal channel showed that, for five updates, compared with CP-ABE method, the average time overhead of data update was decreased by 14.6%. The experimental results show that the dynamic updating of DU-CPABE scheme in cloud computng services can effectively reduce data update time and system overhead.

Key words: cloud computing, data dynamic updating, Ciphertext-Policy Attribute-Based Encryption (CP-ABE) algorithm, Merkle Hash Tree (MHT), cloud security

摘要: 针对云计算数据易遭非法窃取和恶意篡改问题,提出一种支持动态更新操作的密文策略的属性基加密方案(DU-CPABE)。首先利用线性分割思想将数据分成固定大小的数据块,然后采用密文策略属性基加密(CP-ABE)算法对各数据块进行加密,最后提出一种Address-Merkle Hash Tree(A-MHT)搜索树结构,借助A-MHT快速定位数据块实现云服务器中数据动态更新。经理论分析验证了方案的安全性,而且在理想信道中的仿真实验结果显示,在更新次数为5时,此方案相比CP-ABE方案的数据更新时间开销平均下降幅度为14.6%。实验结果表明:DU-CPABE方案在云计算服务中数据动态更新这一过程能够有效地减小数据更新的时间开销,同时降低系统开销。

关键词: 云计算, 数据动态更新, 密文策略属性基加密算法, Merkle哈希树, 云安全

CLC Number: