Study On Data Security And Access Control Of Surveillance Video Based On Attribute Encryption In Cloud Environment

The development of virtualized cloud computing technology provides a solution for the necessary storage capacity and network bandwidth in high resolution video surveillance system.However,when cloud computing services provide the flexible convenient service for service consumer,at the same time,these questions of data protection and securely sharing have not been fully resolved.Although existing solutions such as the usage of cryptography in solving the problem of access control can be able to guarantee security in a way,there are still shortage in the following aspects:On the one hand,although attribute based encryption can effectively combines access control and data encryption to ensure the data safety in the Internet of things,the efficiency limits its development and application.On the other hand,service consumer have the problem of low efficiency when updating access policies,on account of the large amount of surveillance video data stored in the cloud.To solve the above problems,this thesis proposes a data protection and access control scheme for video surveillance data stored in the cloud.The mainly research work of this thesis mainly consists of the following aspects:(1)This thesis proposes an optimized CP-ABE hierarchical data access control scheme by analyzing the security requirements of consumers in cloud video surveillance system.The scheme effectively shortens the decryption time and the generation time of private key by changing the relationship between the different access tree and the generation mode of private key,implements the availability protection of the attribute private key before a certain time by introducing the time parameter and realizes the integrity of the video data and the authenticity of the data source by verifying the validity of the hash value and signature.The scheme solved the problem of insecure storage in untrusted third parties for surveillance video data owner,realized the efficient surveillance video data sharing between different users and improved the privacy and security protection of cloud video surveillance data owner.(2)This thesis proposes an optimized DET-ABE high-efficiency access policy update and surveillance video data encryption scheme aiming at the problem of low efficiency when surveillance video data owner update access policy frequently.According to the structure characteristics of the surveillance video data,the scheme uses the digital envelope to fuse the attribute-based encryption algorithm and combines the idea of block encryption to realize efficient access policy update on the premise of ensuring the confidentiality of the surveillance video data by making use of the high efficiency of the symmetric encryption algorithm and the security of the CP-ABE algorithm.(3)This thesis designs and builds cloud video data access control prototype system based on CP-ABE.The development of the system is based on the convenient and flexible Browser/Server architecture.The system achieve virtual cloud platform by building hadoop environment.The system provides flexible and fine-grained access control for surveillance video owner.In order to verify the performance and feasibility of proposed scheme,this thesis analysis the security performance and carried out simulation test about the proposed scheme and model.The results show that the scheme proposed in this thesis can effectively shorten the encryption and decryption time and the generation time of private key when encrypting multiple files with a certain increase in transmission cost.The proposed scheme realize the securely access control of the video surveillance data and the update of the access policy of the data owner with high efficiency.Besides of that,the proposed scheme ensures the confidentiality and integrity of the video data.