<p>Cloud storage, an emerging technology for data storage and sharing, has gained widespread attention, with increasingly prominent security issues. On the one hand, how to implement access control for unauthorized users in the process of data sharing is one of the urgent problems that need to be solved. Current CP-ABE solutions often encrypt entire data files, leading to high computational costs and communication redundancy. On the other hand, how to audit the data integrity of cloud storage is also one of the research hotspots. In many practical scenarios, keyword-based auditing may be more practical when auditing multiple files stored by data owners. This article first proposes a hybrid-encryption-based data sharing technology: using CP-ABE technology to authorize access control for symmetric encryption keys, which are used to encrypt the original data files. This mode greatly improves the data sharing efficiency. Secondly, this article proposes a keyword-based auditing technique for multiple files, providing technical support for addressing the data integrity of similar files. Finally, security and performance analyses are conducted on the proposed solution. The results indicate that the proposed scheme can meet the security requirements of data sharing and auditing processes. Meanwhile, it has lower communication redundancy and computational overhead.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

The hybrid-encryption-based data sharing scheme with keyword-based auditing function in cloud storage setting

  • Luyao Yang,
  • Jinyong Chang,
  • Yuhang Zhang,
  • Yurong Liu

摘要

Cloud storage, an emerging technology for data storage and sharing, has gained widespread attention, with increasingly prominent security issues. On the one hand, how to implement access control for unauthorized users in the process of data sharing is one of the urgent problems that need to be solved. Current CP-ABE solutions often encrypt entire data files, leading to high computational costs and communication redundancy. On the other hand, how to audit the data integrity of cloud storage is also one of the research hotspots. In many practical scenarios, keyword-based auditing may be more practical when auditing multiple files stored by data owners. This article first proposes a hybrid-encryption-based data sharing technology: using CP-ABE technology to authorize access control for symmetric encryption keys, which are used to encrypt the original data files. This mode greatly improves the data sharing efficiency. Secondly, this article proposes a keyword-based auditing technique for multiple files, providing technical support for addressing the data integrity of similar files. Finally, security and performance analyses are conducted on the proposed solution. The results indicate that the proposed scheme can meet the security requirements of data sharing and auditing processes. Meanwhile, it has lower communication redundancy and computational overhead.