CAJ | 학술논문

针对已有的云存储方案无法有效支持多授权中心和属性权重的问题，提出了一种基于密文策略的多授权中心权重属性加密方案。利用伪随机函数在各个授权中心之间共享一个秘密参数，实现无可信中心的多授权中心机制。通过对来自所有授权中心的属性进行基于权重的分割，实现基于权重的加解密。分析表明，新方案是安全的，可以抵抗恶意用户和授权中心的合谋攻击，并可用于实现针对云存储的安全访问控制。
침대이유적운존저방안무법유효지지다수권중심화속성권중적문제，제출료일충기우밀문책략적다수권중심권중속성가밀방안。이용위수궤함수재각개수권중심지간공향일개비밀삼수，실현무가신중심적다수권중심궤제。통과대래자소유수권중심적속성진행기우권중적분할，실현기우권중적가해밀。분석표명，신방안시안전적，가이저항악의용호화수권중심적합모공격，병가용우실현침대운존저적안전방문공제。
Most of existing cloud storage solutions can not support multi-authority and weight of attributes,so the weighted multi-authority attribute encryption based on ciphertext policy is proposed.The multi-authority ABE without a central au-thority is realized by a pseudo-random function that shares a secret parameter among each authority.Encryption and decryp-tion based on weighted attribute is achieved through weight-based segmentation of the attributes from all the authorization centers.Analysis result shows that the scheme is safe,which can resist the collusion attack from malicious users and au-thorized centers and control the secure access of cloud storage.