摘 要
随着云计算技术的快速发展，云安全问题日益受到关注，其中数据加密与访问控制作为保障云环境中数据机密性和完整性的重要手段，成为研究热点。本文旨在深入探讨云安全领域中数据加密与访问控制的关键技术及其应用，以应对日益复杂的网络安全威胁。研究通过分析现有加密算法和访问控制模型的优缺点，提出了一种基于属性基加密（ABE）与细粒度访问控制相结合的新型框架。该框架不仅能够实现数据在云端的安全存储与传输，还支持动态用户权限管理，从而有效解决传统方法中静态权限分配和密钥管理复杂的问题。实验结果表明，所提出的框架在安全性、效率及可扩展性方面均表现出显著优势，尤其在大规模多用户场景下具有较高的实用价值。此外，本文创新性地引入了智能合约技术优化访问控制策略，进一步增强了系统的灵活性与鲁棒性。研究结论认为，结合先进加密技术和智能化访问控制机制是提升云安全水平的有效途径，为未来云安全技术的发展提供了新的思路与方向。
关键词：云安全；属性基加密；细粒度访问控制；智能合约；密钥管理
Abstract
With the rapid development of cloud computing technology, cloud security issues have attracted increasing attention. Among these, data encryption and access control, as critical means to ensure data confidentiality and integrity in cloud environments, have become research hotspots. This paper aims to explore the key technologies and applications of data encryption and access control in the field of cloud security to address the growing complexity of cyber threats. By analyzing the advantages and disadvantages of existing encryption algorithms and access control models, a novel fr amework combining attribute-based encryption (ABE) with fine-grained access control is proposed. This fr amework not only enables secure data storage and transmission in the cloud but also supports dynamic user permission management, effectively resolving the issues of static permission allocation and complex key management in traditional methods. Experimental results demonstrate that the proposed fr amework exhibits significant advantages in terms of security, efficiency, and scalability, particularly showing high practical value in large-scale multi-user scenarios. Additionally, this study innovatively incorporates smart contract technology to optimize access control strategies, further enhancing system flexibility and robustness. The conclusion suggests that integrating advanced encryption techniques with intelligent access control mechanisms is an effective approach to improving cloud security levels, providing new insights and directions for the future development of cloud security technologies.
Keywords: Cloud Security; Attribute-Based Encryption; Fine-Grained Access Control; Smart Contract; Key Management
目 录
1绪论 1
1.1云安全研究背景与意义 1
1.2数据加密与访问控制技术现状 1
1.3研究方法与技术路线 2
2数据加密技术在云安全中的应用 2
2.1对称加密算法及其特点 2
2.2非对称加密算法分析 3
2.3基于同态加密的云端数据保护 3
2.4加密技术性能评估与优化 4
3云环境下的访问控制机制研究 4
3.1访问控制的基本模型与原理 4
3.2基于属性的访问控制（ABAC）研究 5
3.3动态访问控制策略设计 6
3.4多租户环境下的访问控制挑战 6
4数据加密与访问控制的融合技术研究 7
4.1融合技术的设计目标与框架 7
4.2基于加密的细粒度访问控制实现 7
4.3数据共享中的安全与隐私保护 8
4.4融合技术的实际应用场景分析 8
结论 9
参考文献 10
致 谢 11
