The Research On Personal Data Access Control System In Mobile Cloud Computing

This thesis describes the design and implementation of a personal data access control system: Cloud File, for mobile cloud data storage based on trust evaluation according to mobile social networking activities. In Cloud File, each user can upload his local files to a cloud server, and access and download the files from the server. He can also access other users' files if his trust level satisfies their data access control policy. Cloud File system uses Key Policy–Attribute Based Encryption(KP-ABE) scheme to guarantee the data stored at server-side is safe.Thus, it can effectively prevent the leakage of user data caused by the attack on the server, and flexibly implement the data access control based on social trust levels.System performance tests showed that Cloud File is flexible, secure and efficient. Particularly, we investigated user acceptance on the Cloud File system. Based on system user feedback,we conclude that Cloud File is well accepted by its users with regard to perceived ease of use, practicality, user interface, playfulness and intuitive attitude.The main contribution of this thesis is summarized as below:(1) We proposed using the method of trust management to achieve personal data access control, designed the TLo A algorithm to evaluate the contacts and used the trust value as attributes of KP-ABE realising the user data's encryption.(2) We designed and implemented Cloud File to realize personal data access control in the context of mobile cloud computing. The implementation is based on a cloud data storage server and Android mobile phones. We demonstrated trust evaluation based on social networks and implemented KP-ABE for cloud data access control based on trust.(3) A series of performance assessment tests were designed and performed to show the performance of Cloud File and the security of Cloud File was analyzed. A user study was condected.(4) We analyze the strengths and weaknesses exist in the entire system, in order to improve the performance, making the system more accurate, safe and efficient in personal data access control in the future.