针对云计算隐私安全保护,提出了一种基于数据分割的CP-ABE(密文策略的基于属性的加密方案)隐私保护方案,克服了云环境下不可信第三方、安全性和性能开销的三大难题。本方案利用数据分割思想将数据分为大数据块和小数据块,通过分割策略对大数据块再进行分块,并用CP-ABE算法对小数据块进行加密。经理论分析及实验仿真表明,在云环境下,此方案在安全问题、开销问题及扩展问题上都有很大优势。
According to cloud computing privacy protection, this paper proposed a CP-ABE ( cipertext policy-attribute based encryption) scheme based on data partition which improved security, it reduced the performance overhead, overcome untrustful three sides. This scheme used the data ideological to divide date into big and small block of data, then divided the big data block into small pieces and encrypting the small data block with CP-ABE algorithms. Manager deals with experimental analysis, in a cloud environment, this scheme has advantages on the safety and performance overhead and extension.