关键词: 属性加密, 隐私保护, 访问控制

Abstract: Aiming at the unreasonable access of private data in cloud database and the leakage of personal sensitive information, a cloud data access control model based on PBAC（Purpose-Based Access Control） and ABE（Attribute-Based Encryption） is proposed. Based on the original PBAC model, the concept of attribute destination set is added, and the original destination tree is extended to achieve full coverage, which solves the problem of detailed partitioning. The model also incorporates the attribute encryption technology to construct the public key according to the expected purpose of the data. Only when the authentication is successful and the matching of the destination is successful, can the limited privacy data information be accessed. In the process of achieving full coverage and matching of destination trees, the algorithm of destination tree construction and the purpose matching algorithm are designed, and the security of the algorithm is analyzed. Experimental results show that the combination of PBAC and ABE access control scheme in the encryption and decryption operation is more efficient.

Key words: attribute encryption, privacy protection, access control