基于属性的加密(Attribute-based encryption,ABE)已被广泛研究,其支持细粒度的访问控制可用来共享数据,然而存储容量大以及计算开销大使其难以得到广泛运用.将现有的支持属性匿名的ABE算法的密文数据进行分割并分别存储在不同的云环境中,用于匹配且计算量与存储量小的部分存储在私有云中,利用先匹配后解密的思路提高系统的整体运行效率.从正确性、安全性以及复杂性等方面做出证明,通过与以往的部分ABE算法进行对比以及给出的具体实验说明方案的可行性.
Attribute-based encryption(ABE) has been widely studied recently to support fine-grained access control of shared data, but the file size and cost of computing make it hard to be widely used. This paper aims to solve the problem using hybrid cloud. This paper modify the existing privacy-preserving method to store some message with small size and low computing cost in the private cloud for matching, users could decrypt the file in the public cloud only after the matching phase under the "match-then-decrypt" method. The proposed construction is proven to be secure and the experiment result shows the solution is efficient and practical.