1022011061 朱彬枫 论文正文.doc

杭州国际服务工程学院（信息科学与工程学院） 本科生毕业设计（论文）正文格式 （2012届始执行） 面向安全云存储的文档共享平台的设计与实现 摘 要 近年来随着信息技术的飞速发展，云计算越来越热门，而作为云计算衍生出来的云存储因其TB级的存储能力、低廉的价格、部署便捷等优点逐渐获得了企业、政府等群体性组织的青睐。然而云安全事故在近几年发生的频率不断上升，这严重制约了云存储的推广与发展。面向安全云存储的文档共享平台针对目前主流云存储产品存在的数据安全性低、云存储服务提供商不可信、云上数据缺乏严格访问控制等问题，采用安全网关将存储与加密分离，把所有的加密工作都放在安全网关上进行，并使用一种必威体育精装版的加密技术，密文策略属性基加密，结合混合加密机制对数据进行加密，实现了云存储中数据的安全存储、灵活共享以及对已加密数据的严格访问控制。本平台前端可以有多种客户端形态，比如网站、移动APP等，后端的云存储服务可扩展性较强，可以同时支持主流的公有云及自建的私有云，适用于企业、政府等群体性组织在云存储环境下文档的安全管理。 关键词：安全云存储，属性基加密，密文策略，访问控制  DESIGN AND IMPLEMENTATION OF SECURE DOCUMENT SHARING PLATFORM ON CLOUD STORAGE ABSTRACT In recent years, with the rapid development of information technology, cloud computing has become more and more popular, and as cloud computing derived the cloud storage gained companies, governments and other organizations’ recognition gradually because of its TB level of storage capacity, low price and convenient deployment advantages. However, the frequency of cloud security incidents’ occurrence was rising in recent years continuously, which severely restricted the promotion and development of cloud storage. In order to solve current mainstream cloud storage products’ issues, such as low data security, untrusted cloud storage service providers, the lack of strict access control for cloud data and so on, this paper designs and implement a secure document sharing platform on cloud storage, which uses security gateway to separate storage and encryption, all of encryption will be done on the security gateway, and the platform uses a new encryption technology, ciphertext policy attribute based encryption, combing hybrid encryption mechanism to encrypt data to achieve secure storage of data, flexible sharing and strict access control of encrypted data on cloud storage. The platform has many client forms, such as the web, APPs. In addition, its cloud storage services with high expandability is applicable for mainstream public cloud and private cloud, which also can help the organizations like companies a