混合云模式下数据安全存储方案
Secure Data Storage Scheme in Hybrid Cloud

针对混合云模式下数据安全存储与共享使用的问题，提出一种适用于混合云模式下的高效数据安全共享方案，该方案采用密文策略的属性基加密机制加密数据，通过私有云将密文数据存储在公有云上；移动用户访问云数据时，采用匿名密钥协商技术和委托加解密方法，保证用户对数据的快速访问.实验结果表明，本方案能够保证公有云上数据的安全存储，支持细粒度的访问控制，同时将大部分解密计算委托给私有云，减少移动云用户访问云数据的处理时间，使得其加解密时间为恒定值，不会随着属性的增多而线性增长.
Aiming at the problem of data security storage and sharing in hybrid cloud,an efficient data security sharing scheme was proposed for hybrid cloud mode.In the scheme,an attribute-based encryption mechanism with ciphertext policy was used to encrypt data,the ciphertexts were stored on the public cloud through the private cloud;when mobile users wanted to access cloud data,anonymous key negotiation technology and the delegation mechanism of encryption and decryption were used to ensure fast access to data.The scheme was designed to ensure the secure storage of data on the public cloud,supporting fine-grained access control,and to arrange the private cloud to do most of the computing in the process of encryption and decryption,reducing the processing time for mobile cloud users to access cloud data.In this way,the time for encryption and decryption could be constant regardless of the increasing attributes in the access policy