CAJ | 학술논문

云计算提供一种新兴的数据交互模式，实现了用户数据的远程存储、共享和计算。由于云计算的系统复杂性、网络开放性、资源集中性以及数据敏感性等特点，使得用户与云服务器的交互过程面临着严峻的安全威胁，成为云计算安全领域亟待解决的关键问题。文章首先介绍了云计算系统的系统组件、信任模型和攻击模型，针对云计算系统中的数据安全访问问题，提出了基于密文策略属性基加密的访问控制协议。该协议利用切比雪夫映射的半群特性实现了用户身份的合法性认证，并设计轻量级的属性加密算法实现用户数据的可靠性授权。同时，该协议主要引入身份认证、访问控制和前向安全性机制，实现用户身份真实性认证和数据可靠性访问。通过协议存储需求分析，表明该协议在数据属性集和密钥存储方面具有固定的存储空间需求，避免海量数据交互中用户存储空间的线性增长。通过分析，表明该协议具有较强的可靠性、灵活性和扩展性，适应于云环境中大规模数据交互的应用场景。
운계산제공일충신흥적수거교호모식，실현료용호수거적원정존저、공향화계산。유우운계산적계통복잡성、망락개방성、자원집중성이급수거민감성등특점，사득용호여운복무기적교호과정면림착엄준적안전위협，성위운계산안전영역극대해결적관건문제。문장수선개소료운계산계통적계통조건、신임모형화공격모형，침대운계산계통중적수거안전방문문제，제출료기우밀문책략속성기가밀적방문공제협의。해협의이용절비설부영사적반군특성실현료용호신빈적합법성인증，병설계경량급적속성가밀산법실현용호수거적가고성수권。동시，해협의주요인입신빈인증、방문공제화전향안전성궤제，실현용호신빈진실성인증화수거가고성방문。통과협의존저수구분석，표명해협의재수거속성집화밀약존저방면구유고정적존저공간수구，피면해량수거교호중용호존저공간적선성증장。통과분석，표명해협의구유교강적가고성、령활성화확전성，괄응우운배경중대규모수거교호적응용장경。
Cloud computing provides an emerging data interactive paradigm, and realizes users’ data remote storage, sharing and computing. Due to the system complexity, network openness, resource concentration, and data sensitivity, the process of the user accessing the cloud server is suffering from severe security threats, which make that the cloud data protection becomes an important issue. This work first introduces the system components, trust model, and attack model, and proposes a ciphertext-policy attribute based encryption (CP-ABE) based data access control protocol to achieve data protection. The proposed protocol applies the semi-group property of Chebyshev chaotic map for authentication, and adopts lightweight CP-ABE scheme for authorization. Meanwhile, the security mechanisms including authentication, access control, and forward security are applied to achieve user identification and data access control. According to the storage requirement analysis, the protocol owns fixed storage requirements in the attribute set and key, avoiding the linear growth of massive data interaction. It turns out that the protocol is secure, reliable and flexible for the large-scale data interactions in the cloud environments.