面向移动云环境的委托式数据安全共享关键技术研究

Mobile cloud computing, which combines mobile Internet, cloud computing and mobile terminal together, shows vigorous development trend, and brings profound impact and change in every aspect of people's lives. In mobile cloud computing, it is a natural solution to outsource data storage services and computing services to cloud computing server, especially for resource constrained mobile terminals, which results in more and more problems in data security and privacy protection, traditional data security methods are not suitable in mobile cloud computing. In this project, we focus our attention on the security and efficiency problems in the aspect of data sharing by mobile terminals in mobile cloud computing. Firstly, we study a delegation model of ciphertext access control to realize secure and efficient in storage and access of cloud data by mobile terminals. The model can support flexible and fine-grained access control, and it is quite scalable. Also, we design a lightweight correctness verification scheme in ciphertexts sharing, to ensure that the decryption results returned by the proxy can be verified. Finally we study data privacy protection mechanism towards policies updating, to reduce the cost of re-encryption and implement data leakage prevention. The project has important research value in data security protection, data sharing and access control, and user privacy protection in mobile cloud environment, and it has strong application worthiness to promote the development and application of mobile cloud computing.

移动云计算将移动互联网、云计算、移动终端紧密结合在一起，呈现蓬勃发展的趋势，正在深刻影响和改变着人们的生活。移动云环境下，资源受限的移动终端将存储服务和计算服务外包给云服务器，使其面临着更多的数据安全与隐私泄露问题，传统的数据安全管控方式不再适合于移动云计算。本项目围绕着移动终端共享云数据的安全和效率问题，研究密文访问控制的委托模型，实现移动终端安全、高效存取云数据，且访问控制灵活、权限粒度细、系统扩展性强；研究面向密文共享的轻量级的正确性验证方案，保证委托解密结果的可验证性；研究访问策略动态更新的隐私保护机制，降低重加密代价，防止用户信息泄露。本项目对移动云环境下数据安全保护、共享访问权限控制、用户隐私保护方面具有重要的研究价值，对促进移动云计算的发展和应用具有重要的现实意义。

移动云环境下，云计算、外包计算等新兴计算模式广泛应用，对数据安全与隐私保护带来更加严峻的挑战。本项目研究面向移动终端共享云数据的密文访问控制模型，设计密文策略的属性基加密的访问控制方案，结合不同移动云环境下的实际需求，实现信息安全分发与灵活共享；研究基于外包存储与计算的委托验证方法，设计基于指定证明人签名的云数据完整性验证方法，基于密文共享的委托解密正确性验证方法，保障委托过程中用户数据、访问策略等信息的安全；研究面向策略更新的隐私保护方法和移动云环境的可搜索加密，在信息数据处理中保护用户隐私，防止敏感信息泄露。本项目研究成果可灵活地扩展到车联网、电子医疗、物联网、智能电网等移动云应用领域，具有数据安全保护强、访问控制灵活、隐私保护程度高的特点，具有普适的研究价值。