Research On Cloud Storage Access Control Based On CPABE

With the popularity of cloud computing, cloud storage is reseached and mentiondmore and more. Cloud storage provides data storage and business access functions byusing distributed file system, grid technology and technology of cluster with a hugedifferent kind of storage devices to work together. Because of its effective use of thestorage resources in networks, saves user substantial cost. This makes cloud storageservice has been limited for users do not want to placed their confidential information inthe cloud storage system.Currently there are lots ofstorage service, suchas Amazon’s S3, Microsoft’s WindowAzure, Google App Engine. These early cloud storage service technology is already quitemature, and also provide security support on authentication, authorization, integrity,encryption and non-repudiation. But the encryptions are only used in communicationprocess by https protocol and did not take any processing of the data in the storage system.So how to protect the confidentiality of sensitive data become the biggest concern.This paper proposed a solution for these problems. First, the data owner(DO) encrypthis data with high computational efficiency of the symmetric encryption algorithm, so thedata is stored on the form of the ciphertext. Then use ciphertext policy attribute encryptionscheme control the user’s decryptionability to achieve access control.In addition, the paper also describes the mechanism of the privileges extended andprivileges revoked and efficient privileges revoked which avoid the re-encryption processand greatly improved the efficiency. Finally I analyze the security of the solution andprovide a test of it.