CAJ | 학술논문

在访问控制中，传统公钥加密由于其需要对接收群体的每个成员用其公钥加密，再分发，因此需要获取接收群体中每个成员的身份。但是，在分布式应用中，却难以一次获取接收群体的规模与成员身份。如果列举用户身份，则会损害用户隐私。基于密文策略的属性加密体制(CP-ABE)，由于其广播式的、授权人通过满足某些条件就能确定的特点，避免了由于必须获取这些信息而引出的数据安全问题。于是，文中给出了一种基于CP-ABE的混合加密访问控制系统的设计与实现方案。通过实际项目的成功应用，证明了该方案的可行性与优越性。
재방문공제중，전통공약가밀유우기수요대접수군체적매개성원용기공약가밀，재분발，인차수요획취접수군체중매개성원적신빈。단시，재분포식응용중，각난이일차획취접수군체적규모여성원신빈。여과열거용호신빈，칙회손해용호은사。기우밀문책략적속성가밀체제(CP-ABE)，유우기엄파식적、수권인통과만족모사조건취능학정적특점，피면료유우필수획취저사신식이인출적수거안전문제。우시，문중급출료일충기우CP-ABE적혼합가밀방문공제계통적설계여실현방안。통과실제항목적성공응용，증명료해방안적가행성여우월성。
In access control,due to the need to encrypt with the public key for every member of group in traditional public encryption, then to distribute,so you need to get each member identity of the group. But it is difficult to get all information of receiving group. If list the users' identity,will damage the users' privacy. The CP-ABE,because of the characteristics of broadcasting,the authorized person by satisfying certain conditions to determine,avoids the problems of data security caused by having to get the information. So present a scheme of design and implementation of hybrid encryption access control system based on CP-ABE. Through the successful application of actual project,prove the feasibility and superiority of the scheme.