A Ciphertext Access Control Scheme for Enterprise Synchronous Network Disk

doi:10.3969/j.issn.1006-2475.2014.03.036

Abstract

Abstract: For access control needs of enterprise synchronous network disk, by giving full consideration to the partnership in access control between enterprise and user, this paper designs a dual-controlled enterprises and users ciphertext access control scheme based on RBAC model and CP-ABE mechanism. a prototype system is acheved by using mature open source software in Linux system and the effectiveness and efficiency of the scheme is verified. The scheme can solve the problem of enterprise synchronous network disk ciphertext access control.

Key words: RBAC model, CP-ABE mechanism, role, attribute policy

CLC Number:

TP393.08

WANG Yuan1, YANG Yue-xiang2, DENG Wen-ping2. A Ciphertext Access Control Scheme for Enterprise Synchronous Network Disk[J]. Computer and Modernization, doi: 10.3969/j.issn.1006-2475.2014.03.036.

References

参考文献：
［1］俞能海,郝卓,徐甲甲,等. 云安全研究进展综述［J]. 电子学报, 2013,41(2): 371-381.
［2］Ferraiolo D F, Kuhn D R. Rolebased access controls［C］// The 15th National Computer Security Conference. 1992:554-563.
［3］Bethencourt J, Sahai A, Waters B. Ciphertextpolicy attributebased encryption［C］// Proc. of the 2007 IEEE Symp. on Security and Privacy. 2007:321-334.
［4］李凤华,苏铓,史国振,等. 访问控制模型研究进展及发展趋势［J］. 电子学报, 2012,40(4): 805-813.
［5］韩道军,高洁,翟浩良,等. 访问控制模型研究进展［J］. 计算机科学, 2010, 37(11): 29-33,43.
［6］Fugkeaw S, Manpanpanich P, Juntapremjitt S. Achieving DRBAC authorization in multi-trust domains with MAS architecture and PMI［M］// Agent Computing and Multi-Agent Systems. 2009: 339-348.
［7］王小威,赵一鸣. 一种基于任务角色的云计算访问控制模型［J］. 计算机工程, 2012, 38(24):9-13.
［8］苏金树,曹丹,王小峰,等. 属性基加密机制［J］.软件学报, 2011, 22(6)：1299-1315.
［9］Ibraimi L, Asim M, Petkovic M. An encryption scheme for a secure policy updating［C］// Proceedings of the 2010 International Conference on SECRYPT. 2010: 1-10.
［10］Wang G, Liu Q, Wu J. Hierarchical attributebased encryption for finegrained access control in cloud storage services［C］// Proceedings of the 17th ACM Conference on Computer and Communications Security. 2010: 735-737.
［11］洪澄, 张敏,冯登国. 面向云存储的高效动态密文访问控制方法［J］. 通信学报, 2011, 32(7): 125-132.
［12］孙国梓,董宇, 李云. 基于 CPABE 算法的云存储数据访问控制［J］. 通信学报, 2011, 32(7): 146-152.
［13］洪澄,张敏,冯登国.ABACCS:一种云存储密文访问控制方法［J］. 计算机研究与发展,2010,47(S1):259-265.
［14］金山软件公司. 金山快盘产品说明［DB/OL］. http://e.kuaipan.cn/ product.html, 2013-10-16.

[1]	ZHANG Miaomiao, ZHANG Yujie, LIU Mingtong, XU Jinan, CHEN Yufeng. #br# Chinese Semantic Role Labeling Based on Gated Mechanism and BiLSTMCRF [J]. Computer and Modernization, 2018, 0(04): 1-.
[2]	ZHANG Hao, HUANG Wei, HU Guo-chao. Role Identification of Money Laundering Based on Improved Random Forest [J]. Computer and Modernization, 2018, 0(02): 101-.
[3]	CHEN Qian-guo1, LIU Kui2, ZU Shen-cong1. Role-collaborative Resolution Strategies for Resource Conflicts Model in#br# Teaching Video Reservation System [J]. Computer and Modernization, 2016, 0(2): 112-116,126.
[4]	ZHOU Chun-rong, XIAO Xiang-lin,YANG Hua. Design and Realization of Java Web Common Users Permissions Management Frame [J]. Computer and Modernization, 2014, 0(3): 177-179,196.
[5]	WU Yue-zhong, WANG Tao, YU Gui-jun. Online Examination System Based on Struts [J]. Computer and Modernization, 2014, 0(12): 44-48.
[6]	LIU Fang-hua;ZHANG Guang-he;ZHANG Kai. Research and Design of Dynamic Menu Generation Algorithm Based on M-tree [J]. Computer and Modernization, 2013, 1(7): 47-050.
[7]	ZHANG Wei-quan;CHEN Jing-min. Empirical Research About Micro Blog Political Participating Based on Social Network Mining [J]. Computer and Modernization, 2012, 1(201): 67-70.
[8]	LUO Yu-dong. Research on Application of ERBAC in Multi-enterprises Permission Management [J]. Computer and Modernization, 2012, 1(10): 172-176.
[9]	LI Weiyu. Design and Development of Large Aircraft Project RiskManagement Planning Decisionmaking System [J]. Computer and Modernization, 2012, 1(03): 169-172.
[10]	ZHU Jiayun;WAN Linrui. Research on Meta Process Instance Generator Based on Role and Namespace [J]. Computer and Modernization, 2012, 1(03): 55-58.
[11]	GAO Chun-ling;YUN Ya-li. Research and Realization of University Office Information System Based on Workflow [J]. Computer and Modernization, 2011, 1(8): 204-206.
[12]	LIU Qingxiu ;LI Xiufang . Study of Multiagent Collaborative Process Based on Role and CSCL  [J]. Computer and Modernization, 2011, 1(5): 114-116.
[13]	ZHANG Dagang. Research on Rolebased Mandatory Access Control in Data Warehouse [J]. Computer and Modernization, 2011, 1(5): 31-34.
[14]	YANG Kai. Application Research on Triple Play Technology for Oil and Gas Fields in Sichuan [J]. Computer and Modernization, 2011, 1(4): 75-78.
[15]	ZHANG Qiang;ZHENG Hong-yuan;DING Qiu-lin. Task-Role-based Workflow Access Control Model with Multi-constraints [J]. Computer and Modernization, 2011, 12(12): 9-12,1.