DATA ACCESS CONTROL METHOD

摘要

Provided is a safe and scalable method for controlling access to data based on ciphertext policy-attribute based encryption (CP-ABE) by using a manager which is a reliable entity in cloud computing. The provided method comprises the following steps: a data owner unit requests a manager unit to generate a data encryption key; the manager unit generates the data encryption key; the manager unit generates secret keys for decoding a result of performing CP-ABE on the data encryption key and a result of performing CP-ABE to respond to the data owner unit; the data owner unit obtains the data encryption key by decoding the result of performing CP-ABE using the secret key, and encrypts data by using the obtained data encryption key; and the data owner unit uploads the encrypted data and data encryption key information to cloud.