Design Of Identity-Based Distributed Storage Security System

With a large number of data emerged these years, data security has become more important than ever before, especially as cloud come into our life, we put more private digital data into cloud, and access them through many kinds of device, share some of them with our friends. All this bring us into another scene to think the security of our private data security.In this paper, we present a security flexible data storage scheme suitable for cloud environment. It is an identity-based system which provides strong security and privacy guarantees for our data, and it closely binds security information with data together so that data are used in a controllable way when they are shared among multiple users. All the security information is encrypted by a legitimate user's public key. Furthermore, data owner could customize flexible access policies to achieve adjustable level of security, no matter where the data is. Compared with traditional methods, our scheme implements a complete distributed security management scheme. And our design is more secure because we offload most security related operations on clients, which alleviates the overhead of cloud serves.We implement a prototype of our scheme based on OBFS, which is an open source object based storage system. Our implementation and performance evaluation demonstrate the flexibility of the scheme on access control and data protection policy. And the prototype is efficient with acceptable execution overhead and small space cost.