Implementation of shared file encrypted storage hierarchical access control scheme

Li LI; Guo-zhen SHI; Xuan WANG; Yun-fei CI

doi:10.11959/j.issn.2096-109x.2016.00077

您当前的位置：

首页 >

文章列表页 >

Implementation of shared file encrypted storage hierarchical access control scheme

Academic paper | 更新时间：2024-06-03

- Implementation of shared file encrypted storage hierarchical access control scheme
- Chinese Journal of Network and Information Security Vol. 2, Issue 7, Pages: 26-32(2016)
- 作者机构：
  
  [1]. 北京电子科技学院电子信息工程系，北京 100070
  [2]. 西安电子科技大学通信工程学院，陕西西安 710071
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2016.00077
  CLC： TP393
- Online First：2016-07，
  
  Published：15 July 2016
- 稿件说明：
移动端阅览
Li LI, Guo-zhen SHI, Xuan WANG, et al. Implementation of shared file encrypted storage hierarchical access control scheme[J]. Chinese Journal of Network and Information Security, 2016, 2(7): 26-32.
DOI：

Li LI, Guo-zhen SHI, Xuan WANG, et al. Implementation of shared file encrypted storage hierarchical access control scheme[J]. Chinese Journal of Network and Information Security, 2016, 2(7): 26-32. DOI： 10.11959/j.issn.2096-109x.2016.00077.

摘要

为解决传统文件共享方式单一、安全性不足以及共享文件权限控制自主性过高的问题，提出了一种文件加密存储分级访问控制方案，通过在系统中增加分级管理单元，实现对用户、文件的分级以及用户对文件访问权限的控制，实现文件的访问范围可控；通过文件的加密实现文件存储和传输的安全性；分级密钥的使用，简化了密钥的存储。服务器端文件的加解密操作通过专门的密码卡实现，减轻了服务器端的工作量，加速了文件的加解密处理。在基于PC和Zynq平台上进行了验证，实现了预定功能。

Abstract

The traditional file sharing way is single

lack of security

and the shared file's permission autonomous control is too high.To solve these problems

a file encrypted storage and hierarchical access control scheme was proposed.Through increasing classification management unit in the system

classification of users and documents

users of file access control were achieved

the scope of file access control was realized.Security of file storage and transmission was realized through encryption

the key storage was simplified using hierarchical key.Server file en-cryption and decryption operations were achieved through a special password card

which reduced the server work-load and accelerated the file encryption and decryption processing.The scheme was verified on PC and Zynq plat-form

and the predetermined function was realized.

关键词

Keywords

references

BUGLIESI M , COLAZZO D , CRAFA S , et al . A type system for discretionary access control [J ] . Periodical , 2009 , 19 ( 4 ): 839 - 875 .

XU L , ZHANG H Q , DU X H , et al . Research on mandatory access control model for application system[C]//The International Con-ference on Networks Security,Wireless Communications and Trusted Computing . Periodical , c2009 : 159 - 163 .

SANDHU R , COYNE E , FEINSTEIN H , et al . Role-based access control models [J ] . IEEE Computer , 1996 , 29 ( 2 ): 38 - 47 .

WANG G J , LIU Q , WU J . Hierarchical attribute-based encryption for fine-grained access control in cloud storage services[C]//The 17th ACM Conference on Computer and Communications Security . c2010 : 735 - 737 .

李凤华，苏铓，史国振，等 . 访问控制模型研究进展及发展趋势 [J ] . 电子学报， 2012 , 40 ( 4 ): 806 - 813 .

LI F H , SU M , SHI G Z , et al . Research status and development trends of access control model [J ] . Acta Electronica Sinica , 2012 , 40 ( 4 ): 806 - 813 .

AKL S G . Cryptographic solution to a problem of access control in a hierarchy [J ] . ACM Transactions on Computer Systems , 1983 .

HARN L , LIN H Y . A cryptographic key generation scheme for multilevel data security [J ] . Computers and Security , 1990 .

HWANG M S , YANG W P . Controlling access in large partially ordered hierarchies using cryptographic keys [J ] . The Journal of Systems and Software , 2003 .

LO J W , HWANG M S , LIU C H . An efficient key assignment scheme for access control in a large leaf class hierarchy [J ] . Infor-mation Sciences , 2010 ( 4 ).

程芳权，彭智勇，宋伟，等 . 可信云存储环境下支持访问控制的密钥管理 [J ] . 计算机研究与发展， 2013 , 8 : 1613 - 1627 .

CHENG F Q , PENG Z Y , SONG W , et al . Key management for ac-cess control in trusted cloud storages [J ] . Journal of Computer Re-search and Development , 2013 , 8 : 1613 - 1627 .

吕智泉，张敏，冯登国 . 云存储密文访问控制方案 [J ] . 计算机科学与探索， 2011 , 5 ( 9 ): 836 - 844 .

LV Z Q , ZHANG M , FENG D G . Cryptographic access control scheme for cloud storage [J ] . Journal of Frontiers of Computer Science ＆ Technology , 2011 , 5 ( 9 ): 836 - 844 .

熊厚仁，陈性元，张斌，等 . 基于双层角色和组织的可扩展访问控制模型 [J ] . 电子与信息学报， 2015 , 7 : 1612 - 1619 .

XIONG H R , CHEN X Y , ZHANG B , et al . Scalable access control model based on double-tier role and organization [J ] . Journal of Electronics ＆ Information Technology , 2015 , 7 : 1612 - 1619 .

李怀明，王慧佳，符林 . 基于组织的 Web 服务访问控制模型 [J ] . 计算机工程， 2014 , 11 : 65 - 70 .

LI H M , WANG H J , FU L . Organization-based access control model for Web service [J ] . Computer Engineering , 2014 , 11 : 65 - 70 .

熊智，王平，徐江燕，等 . 一种基于属性的企业云存储访问控制方案 [J ] . 计算机应用研究， 2013 , 2 : 513 - 517 .

XIONG Z , WANG P , XU J Y , et al . Attribute based access control strategy for enterprise cloud storage [J ] . Application Research of Computers , 2013 , 2 : 513 - 517 .

王小威，赵一鸣 . 一种基于任务角色的云计算访问控制模型 [J ] . 计算机工程， 2012 , 24 : 9 - 13 .

WANG X W , ZHAO Y M . A task-role-based access control model for cloud computing [J ] . Computer Engineering , 2012 , 24 : 9 - 13 .

池亚平，王艳，王慧丽，等 . 基于等级的电子政务云跨域访问控制技术 [J ] . 计算机应用， 2016 , 2 : 402 - 407 .

CHI Y P , WANG Y , WANG H L , et al . Cross-domain access control for e-government cloud based on classification [J ] . Journal of Com-puter Applications , 2016 , 2 : 402 - 407 .

郝小龙 . 改进的RBAC模型在电网视频监控平台中的应用 [J ] . 计算机技术与发展， 2014 , 12 : 212 - 215 .

HAO X L . Application of improved RBAC model in grid video moni-toring platform [J ] . Computer Technology and Development , 2014 , 12 : 212 - 215 .

Views

178

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Key-customizable encrypted deduplication with access control for cloud storage

Scenario-aware access control model

Credible distributed identity authentication system of microgrid based on blockchain

Research progress of access control based on blockchain

Efficient and secure multi-user outsourced image retrieval scheme with access control

Related Author

YU Nenghai

LI Weihai

XU Zikai

GU Bolun

Aodi LIU

Na WANG

Wenjuan WANG

Xuehui DU

Related Institution

School of Cyber Science and Technology, University of Science and Technology of China

Anhui Province Key Laboratory of Digital Security

Information ＆ Telecommunications Company.State Grid Shandong Electric Power Company, Ji'nan

Shandong Luruan Digital Technology Co., LTD, Ji'nan

College of Computer Science and Electronic Engineering, Hunan University

⁰