本文關鍵詞： 云存儲安全 屬性加密機制 數(shù)字信封 動態(tài)口令　出處：《計算機應用與軟件》2016年09期 　論文類型：期刊論文

【摘要】：為了高效地實現(xiàn)云端數(shù)據(jù)的存儲和傳輸安全,提出一種結合數(shù)字信封技術的改進的密文策略的屬性加密機制(CPABE)云存儲安全模型。該模型在不影響云服務性能的前提下保護用戶的敏感數(shù)據(jù),在數(shù)據(jù)未上傳至云端前對數(shù)據(jù)進行本地加密;加密密鑰通過CP-ABE機制以保證密鑰不會被非法用戶獲取,并通過數(shù)字信封技術確保數(shù)據(jù)在傳輸過程中的完整性和保密性。新模型還結合動態(tài)口令(OTP)對用戶進行登錄校驗,從而有效阻止非授權用戶對數(shù)據(jù)的訪問。仿真實驗表明,改進的模型能夠安全有效地保護用戶的機密數(shù)據(jù),阻止惡意用戶對云服務器的非法訪問。通過和現(xiàn)有云存儲安全方案進行時間性能對比,改進的CP-ABE方案加密效率和安全性能有較大幅度提高。
[Abstract]:In order to realize the storage and transmission security of cloud data efficiently, In this paper, an improved attribute encryption mechanism of ciphertext policy based on digital envelope technology, named CPABE-based cloud storage security model, is proposed, which protects the sensitive data of users without affecting the performance of cloud services. The data is encrypted locally before the data is uploaded to the cloud; the encryption key is used through the CP-ABE mechanism to ensure that the key will not be obtained by the illegal user. The digital envelope technology is used to ensure the integrity and confidentiality of the data in the transmission process. The new model also uses dynamic password and OTPto to verify the user's login, thus effectively preventing unauthorized users from accessing the data. The simulation results show that, The improved model can protect the confidential data of users safely and effectively, and prevent malicious users from accessing the cloud server illegally. The encryption efficiency and security performance of the improved CP-ABE scheme are greatly improved.
【作者單位】： 江西理工大學信息工程學院;
【基金】：國家自然科學基金項目(11062002,61363076) 江西省教育廳重點科技項目(GJJ13435,GJJ14465) 江西省自然科學基金項目(20142BAB207020)
【分類號】：TP309;TP333
，

本文編號：1502679