CAJ | 학술논문

为适应在云环境下外包个人健康记录的安全需求，文章提出一个用于个人健康记录云存储的属性密文访问控制方案。在密文策略属性基加密和对称加密算法(如AES等)的基础上，根据个人健康记录数据服务存在层级用户的特点，结合层级访问控制机制及用户访问目的优化密文策略属性基加密的访问结构，使得访问控制策略和密钥管理过程更加简洁；同时结合代理重加密技术和懒惰重加密由云服务提供商实现权限撤销，以便减轻数据拥有者的计算负荷。
위괄응재운배경하외포개인건강기록적안전수구，문장제출일개용우개인건강기록운존저적속성밀문방문공제방안。재밀문책략속성기가밀화대칭가밀산법(여AES등)적기출상，근거개인건강기록수거복무존재층급용호적특점，결합층급방문공제궤제급용호방문목적우화밀문책략속성기가밀적방문결구，사득방문공제책략화밀약관리과정경가간길；동시결합대리중가밀기술화라타중가밀유운복무제공상실현권한철소，이편감경수거옹유자적계산부하。
This paper proposes a cryptographic access control scheme based on attribute in cloud storage for PHR .The symmetric crypto system(such as AES) is used to encrypt the original data by the Data Owner ,and the cipher-text attribute-based encryption algorithm is used to encrypt the symmetric key. According that the service of PHR Data has hierarchical users, purpose of accessing to PHR and hierarchical access control mechanism are combined to construct simple and efifcient access tree of CP-ABE, while simplifying the procedure of key management. By utilizing proxy re-encryption and lazy re-encryption, privileges are revoked by the cloud service provider, which can largely reduce computation tasks of DO.