A composite document model and its access control scheme in cloud computing

作者：Xiong Jinbo; Yao Zhiqiang; Ma Jianfeng; Liu Ximeng; Ma Jun

来源：Journal of Xi'an Jiaotong University, 2014, 48(2): 25-31.

DOI：10.7652/xjtuxb201402005

• Access control schemes
• Authorized users
• Composite documents
• Comprehensive analysis
• Computational overheads
• Identity Based Encryption
• Multi-level security
• Security requirements

A composite document model (ComDoc) and its fine-grained access control scheme (ICDAC) are proposed to address the actualities of lack of effective composite document model and multilevel security protection for document elements in cloud computing. The model combines the idea of multilevel security with an identity-based encryption (IBE) algorithm. In ComDoc composite document consists of a ciphertext part and a key-map part. The former stores the ciphertexts of document elements with security level. The element names and corresponding keys constitute map pairs and map records, and the records are then encrypted by the IBE and stored in the latter. The ICDAC achieves fine-grained access control with multilevel security protection for document elements by the following strategy. Authorized user decrypts the corresponding map records to get map pairs under the IBE in terms of the identity, and to extract the decryption keys to obtain the plaintext of the document elements. Comprehensive analysis shows that ComDoc satisfies the composite document characteristics and security requirements in cloud computing. Experimental results show that both the key numbers and the computational overheads of ICDAC are superior to existing scheme on the premise of encrypting the same composite documents.

• 出版日期2014
• 单位西安电子科技大学