CN115514536A - A method for secure sharing of traceable data in a cloud-assisted Internet of Things environment - Google Patents

Abstract

The invention discloses a safe sharing method of traceable data in a cloud-assisted Internet of things environment, which comprises the following steps: constructing a fine-grained distributed information flow control model supporting identity traceability; based on a trusted authority center, a data owner marks data and uploads the data to a cloud; based on the label and the label distributed by the trusted authority center, the data user sends the received label and the label to the cloud end as a part of data request parameters to request the required data; based on a fine-grained distributed information flow control model supporting identity traceability, the cloud end carries out data sharing decision on a data request of a data user; when the data sharing decision is true, the trusted authority center performs identity verification on the data user; and when the identity verification result is true, the cloud delivers the data to the data user. By using the invention, traceability of the identity of the data user in the data sharing process can be realized.

Description

A method for secure sharing of traceable data in a cloud-assisted Internet of Things environment

technical field

The invention relates to the field of data security sharing, in particular to a method for security sharing of traceable data in a cloud-assisted Internet of Things environment.

Background technique

The Internet of Things is a network composed of physical objects. These physical objects can be sensors, cameras, and smart devices. These objects are connected to each other and frequently exchange data. In the past ten years, cloud computing, mobile edge computing, wireless The rapid development of information technologies such as communication technology and the Internet of Things has led to an explosive growth in the number of smart devices and sensors, which has completely revolutionized people's lifestyles, cognitive concepts and thinking patterns; however, due to the computing, storage and network resources of IoT devices limited, data storage and processing is undoubtedly a huge challenge; therefore, the cloud-assisted Internet of Things model emerged as the times require, in which massive data are uploaded to the cloud for calculation, processing and management, which to a great extent It reduces the overhead of IoT devices in data processing; however, due to the incomplete trustworthiness unique to the cloud itself, it also brings some security issues such as data confidentiality and integrity, data leakage, and malicious access to data.

Chinese patent document number CN110990858A discloses a cross-cloud resource sharing system and method based on distributed information flow control, the system includes: registration management module, data management module, identity authentication module, information flow control module, log database and log audit module. The method includes: the resource request cloud initiates a registration request, the request message is forwarded to the registration management module through the network platform, the registration management module performs the registration operation and stores the resource information contained in the request cloud into the data management module; the request cloud stored by the data management module The resource information is stored in a certain data structure and sent to the identity authentication module to authenticate the resource request cloud; when the request message of the resource request cloud is sent to the identity authentication module through the network platform, the request message is parsed and the resource request cloud is processed according to the analysis result. Verification; the information flow control module authenticates the received resource or service data to ensure the legitimacy of the data; the log audit module audits the log information in the log database, and conducts behavioral security warning and detection. By using the present invention, fine-grained tracking and control of cloud data resources can be realized, the process security of shared data can be strictly protected from the aspects of confidentiality and integrity, the system overhead is small and no additional storage overhead will be caused, but when the data is in the data When sharing occurs between the author and the data user, the identity of the data user cannot be determined.

Contents of the invention

In order to solve the above technical problems, the object of the present invention is to provide a method for securely sharing traceable data in a cloud-assisted Internet of Things environment, which can realize the traceability of data user identities during the data sharing process.

The technical solution adopted in the present invention is: a method for safely sharing traceable data under a cloud-assisted Internet of Things environment, comprising the following steps:

Build a fine-grained distributed information flow control model that supports traceable identities. The fine-grained distributed information flow control model that supports traceable identities includes entities, tags, tags, security environments, security domains, owner tags, and distributed permissions. , security information flow rules and security information flow rules that support identity traceability;

Based on the trusted authority center, the data owner marks the data and uploads it to the cloud, and at the same time entrusts the data access authority to the trusted authority center for management;

Based on the tags and labels distributed by the trusted authority center, data users send the received tags and tags as part of the data request parameters to the cloud to request the data they need;

Based on the security information flow rules of the fine-grained distributed information flow control model that supports identity traceability, the cloud makes data sharing decisions on the data requests of data users;

When the data sharing decision is true, the trusted authority center verifies the identity of the data user;

When the identity verification result is true, the trusted authority center grants data access rights to the data user, and the cloud delivers the data to the data user.

Further, the fine-grained distributed information flow control model supporting identity traceability further includes: entity creation rules, privilege-based tag change rules, and authority grant rules.

Further, the entity creation rules are as follows:

表示主体A可以创建实体A′，L_X表示机密性标记或完整性标记，t_O表示物主标签，L_X(A′):＝L_X(A)表示被创建的实体A′继承了主体A的机密性标记或完整性标记，t_O(A′):＝t_O(A)表示被创建的实体A′继承了主体A的物主标签，

表示主体A为其创建的实体A′分配相应的权限。In the above formula,

Indicates that subject A can create entity A′, L _X represents the confidentiality mark or integrity mark, t _O represents the owner label, L _X (A′):=L _X (A) represents that the created entity A′ inherits the subject A’s confidentiality mark or integrity mark, t _O (A′):=t _O (A) means that the created entity A’ inherits the owner tag of subject A,

Indicates that subject A assigns corresponding permissions to the entity A' it creates.

Further, based on the trusted authority center, the data owner marks the data and uploads it to the cloud, and at the same time entrusts the data access authority to the trusted authority center for management, which specifically includes:

The data owner generates a shared list and sends it to a trusted authority to request labeling;

The trusted authority center generates tags based on the shared list and distributes them to data owners;

The data owner uses the confidentiality mark, the integrity mark and the owner mark to mark the data to be uploaded in the gateway;

The data owner uploads the marked data to the cloud, and at the same time entrusts the data access authority to the trusted authority center for management.

Further, when the data sharing decision is true, the step of verifying the identity of the data user by the trusted authority center specifically includes:

When the data sharing decision is true, the cloud will feed back the data sharing decision to the trusted authority center, and at the same time send the trajectory data generated based on the owner tags of the data owner and data user to the trusted authority center for storage;

The trusted authority center verifies the identity of the data user based on the trajectory data and the maintained white list.

Further, it also includes:

When the data sharing decision is false, the data request of the data user is ended, and the cloud will feed back the data sharing decision to the trusted authority center, and at the same time send the trajectory data generated based on the owner tags of the data owner and data user to the trusted authority center to store.

Further, when the identity verification result is true, the trusted authority center grants the data access right to the data user, and at the same time, the cloud delivers the data to the data user, which specifically includes:

When the identity verification result is true, the trusted authority center grants data access rights to the data user, and at the same time feeds back the identity verification result to the cloud;

The cloud delivers the data to the data user according to the result of identity verification;

Data users access data according to the granted access rights.

Further, it also includes:

When the identity verification result is false, the trusted authority center terminates the grant of data access rights, and at the same time feeds back the result of identity verification to the cloud;

The cloud terminates data sharing based on the result of the identity verification being false.

Further, it also includes:

The data owner tags the uploaded data with its owning tag;

Data users request data from the cloud based on their owner tags;

Based on the fine-grained distributed information flow control model that supports identity traceability and the security information flow rules that support identity traceability, the flow of data between subjects is obtained according to the owner label.

Further, the details of the security information flow rules that support identity traceability are as follows:

表示安全信息流动规则，A→B表示主体A到主体B的信息流向，t_O(A)表示主体A的物主标签，t_O(B)表示主体B的物主标签，

表示记录信息流动的轨迹数据，

表示无论当主体A和主体B间的信息流动是否遵循安全信息流动规则均生成

In the above formula, L _S (A) represents the confidentiality mark of subject A, L _I (A) represents the integrity mark of subject A, L _S (B) represents the confidentiality mark of subject B, and L _I (B) represents the B's integrity mark,

Indicates the security information flow rules, A→B indicates the information flow direction from subject A to subject B, t _O (A) indicates the owner label of subject A, t _O (B) indicates the owner label of subject B,

Represents the track data that records the flow of information,

means that no matter when the information flow between subject A and subject B complies with the rules of safe information flow, it will generate

The beneficial effects of the method of the present invention are: firstly, the present invention builds a fine-grained distributed information flow control model that supports identity traceability; secondly, the data owner requests a label from the trusted authority center to mark the data and upload it to the cloud, and at the same time, the data access authority Entrusted to the trusted authority center for management; then data users send to the cloud according to the tags and labels distributed by the trusted authority center as part of the data request parameters to request the data they need; and then the cloud based on the above-mentioned safe information flow rules of the model Make a data sharing decision, and when it is determined that the data sharing decision is true, the trusted authority center will verify the identity of the data user. Further, when the identity verification result is true, the cloud will deliver the data to the data user, realizing the security of data sharing; Furthermore, data owners use their owner tags to mark the uploaded data, and data users request data from the cloud based on their owner tags. Based on the security information flow rules that support identity traceability in the above model, data transfer between subjects is obtained according to the owner tags. In order to realize the traceability of the identity of data users in the process of data sharing.

Description of drawings

Fig. 1 is a flow chart of steps of a method for safe sharing of traceable data under a cloud-assisted Internet of Things environment of the present invention;

FIG. 2 is a schematic diagram of the same security domain and information flow between security domains according to a specific embodiment of the present invention;

Fig. 3 is a schematic diagram of safe information flow in a specific embodiment of the present invention;

FIG. 4 is a schematic diagram of a traceable data security sharing process in a cloud-assisted Internet of Things environment according to a specific embodiment of the present invention.

detailed description

The present invention will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. For the step numbers in the following embodiments, it is only set for the convenience of illustration and description, and the order between the steps is not limited in any way. The execution order of each step in the embodiments can be adapted according to the understanding of those skilled in the art sexual adjustment.

With reference to Fig. 1 and Fig. 4, the present invention provides a kind of safe sharing method of traceable data under the Internet of Things environment assisted by the cloud, and this method comprises the following steps:

S1. Build a fine-grained distributed information flow control model that supports identity traceability;

Specifically, the fine-grained distributed information flow control model that supports identity traceability includes entities, labels, tags, security environments, security domains, owner tags, distributed permissions, security information flow rules, entity creation rules, and supports identity traceability. Security information flow rules, privilege-based token change rules, and authority grant rules.

Among them, entities are divided into subject and object. The subject represents the object of information flow, and the object represents the specific flow of information. The information can be files or specific data. If the flow and sharing between the doctors and medical researchers is called the subject, the shared data is called the object; in addition, the subject can create a new subject and change its own security environment according to the actual application needs, and it can also control its own Resources such as owned data are marked securely to achieve the purpose of security protection.

Tags and tags, the tag (Tag) is abbreviated as t, which itself is a randomly generated string of characters, without any security meaning, that is, without integrity and confidentiality meaning, the size of the tag can be customized according to security requirements For example, its size can be 128 bits, 256 bits, and 512 bits, etc.; Label (Label) is abbreviated as L, which means a collection of labels, that is, t∈L. Similarly, the label itself does not have any security meaning, that is, Has no integrity and confidentiality implications. Only after being granted the corresponding integrity and confidentiality characteristics, the two have corresponding security meanings; when a label L is granted the confidentiality characteristics, this embodiment model expresses it as L _S , where "S" means confidentiality; when a tag t is granted the confidentiality property, this embodiment model denote it as t _S . Similarly, L _I represents an integrity label, and t _I represents an integrity label.

Security environment. The security environment of each subject is composed of the subject's confidentiality mark and integrity mark. In its security environment, the subject can use its own security authority to change its security environment.

Security domain, security domain refers to the security environment where the object is located, one or more subjects with the same security environment can exist in the same security domain; it is worth noting that different security domains have different security policies and restrictions, the main performance Confidentiality restrictions and integrity restrictions; in this embodiment model, objects can only flow in the same security domain or flow from a low security domain to a high security domain, where a low security domain refers to a domain with low confidentiality and A high-integrity security domain, a high-security domain refers to a security domain with high confidentiality and low integrity; under normal circumstances, the flow of objects in a security domain or between security domains strictly follows the "no reading up, writing down "the rule of.

Among them, the flow of objects in security domains or between security domains is shown in Figure 2. The security restrictions of security domain 1, security domain 2, and security domain 3 show an increasing relationship. Refers to the prohibited information flow; Figure 2 shows that there are 6 types of allowed information flow, namely the information flow from security domain 1 to security domain 2, the information flow from security domain 1 to security domain 3, and the information flow from security domain 2 to security domain 3 and the information flow in each of the three security domains.

Owner tag, the owner tag is denoted as t _O , which is used to identify the owner of an object, that is, the owner of the information. The flow direction of objects between subjects, that is, the flow direction of an object from one subject to another. For example, for subject A, its owner tag is expressed as t _O (A), and for subject B, its owner The label is denoted as t _O (B), then the flow of the object between subject A and subject B is expressed as A→B in this embodiment model, and correspondingly, the flow direction of the object based on the owner label record is denoted as t _O (A)→t _O (B); Second, the owner tag is used to reveal the identity information of the subject, because in this embodiment model, the owner tag indicates the identity information of the object, when the identity information of the object needs to be revealed When , you only need to query the owner tag to reveal the corresponding object identity. For example, in the above-mentioned flow direction t _O (A) → t _O (B), when you need to know which two subjects the object is In order to disseminate, you only need to query or calculate t _O (A) and t _O (B) to determine the identity of the corresponding subject A and subject B, and then realize the traceability of information in the process of flow.

相应地，

表示主体A自身具备移除其机密性标记上机密性标签的能力；类似地，

及

分别表示主体A具备对其完整性标记的标签添加和删除能力；此实施例模型中，每个主体均具备对其标记的相应操作权限。Distributed permissions, Privilege is abbreviated as P, which represents the ability to operate on tags, that is, the ability to add or delete tags to tags; for example, for a subject A, it has the ability to add confidentiality tags to its confidentiality tags capability, this example model expresses it as

Correspondingly,

Indicates that subject A itself has the ability to remove the confidentiality label on its confidentiality label; similarly,

and

Respectively indicate that the subject A has the ability to add and delete labels for its integrity marks; in the model of this embodiment, each subject has the corresponding operation authority for its marks.

Security information flow rules, the model of this embodiment expresses the information flow from subject A to subject B as A→B, if and only when the following rules are satisfied, the information flow is safe.

The above rules restrict the flow of information from two aspects of confidentiality and integrity at the same time. The confidentiality relationship between subject A and subject B strictly restricts the outflow of information, and the relationship between integrity marks between objects strictly restricts the inflow of information. , if and only if the relationship between the confidentiality tags and the integrity tags is satisfied at the same time, the information flow A→B is allowed and safe; otherwise, the information flow is prohibited.

As shown in Figure 3, L _S (A)={t _S1 } and L _I (A)={t _I1 ,t _I2 ,t _I3 } are the confidentiality mark and integrity mark of subject A respectively, and L _S (B )={t _S1 ,t _S2 ,t _S3 } and L _I (B)={t _I1 } represent the confidentiality mark and integrity mark of subject B respectively, and the solid arrow represents the allowed and safe flow of information, that is, from the subject The information flow direction from A to subject B, the dotted arrow is the forbidden information flow direction, that is, the information flow direction from subject B to subject A; according to the confidentiality mark and integrity mark of the two subjects, the flow direction of information from subject A to subject B The flag strictly follows the safe information flow rules, so the information flow in this direction is allowed and safe.

相应的实体创建规则如下：Entity creation rules, in this embodiment model, the subject can create a new entity according to the actual situation, if subject A can create entity A', expressed as

The corresponding entity creation rules are as follows:

表示主体A为其创建的实体A′分配相应的权限。In the above formula, L _X represents the confidentiality mark or integrity mark, t _O represents the owner label, L _X (A′):=L _X (A) means that the created entity A’ inherits the confidentiality mark of subject A or integrity mark, t _O (A′):=t _O (A) indicates that the created entity A′ inherits the owner label of subject A,

Indicates that subject A assigns corresponding permissions to the entity A' it creates.

Support traceable security information flow rules. The above-mentioned safe information flow rules strictly limit the outflow and inflow of information in terms of confidentiality and integrity, so as to ensure the security and legitimacy of information flow from subject A to subject B. However, from the perspective of accountability or traceability, the above-mentioned safe information flow rules cannot meet the security requirements, so the identity traceability is realized by introducing the owner tag; therefore, for the The following information flow rules are formulated to support the traceability of identities:

In the above formula, L _S (A) represents the confidentiality mark of subject A, L _I (A) represents the integrity mark of subject A, L _S (B) represents the confidentiality mark of subject B, and L _I (B) represents the The integrity mark of B, A→B indicates the information flow direction from subject A to subject B, t _O (A) indicates the owner label of subject A, and t _O (B) indicates the owner label of subject B.

表示安全信息流动规则，右边

表示记录信息流动的轨迹数据，

表示无论当主体A和主体B间的信息流动是否遵循安全信息流动规则

均生成

The rule consists of left and right parts, the left

Indicates safe information flow rules, right

Represents the track data that records the flow of information,

Indicates whether the information flow between subject A and subject B follows the security information flow rules

are generated

意为标记从L_X变化为L′_X，其中X可以为S或I，S表示机密性，I表示完整性；则

表示机密性标记的变化，

表示完整性标记的变化；对于一个主体来说，对标记执行添加或删除标签操作需要具备相应的特权，基于此制定了以下基于特权的安全标记变化规则：Based on the privileged label change rule, when the subject performs label addition or deletion operations on its own label, obviously, its label will change. This embodiment model expresses this process as

It means that the label changes from L _X to L′ _X , where X can be S or I, S means confidentiality, and I means integrity; then

Indicates a change in the confidentiality flag,

Indicates the change of the integrity tag; for a subject, the operation of adding or deleting tags on the tag requires corresponding privileges, based on this, the following privilege-based security tag change rules are formulated:

In the above formula, X can be S or I.

规则，即当主体A拥有权限

时，才可在其现有的标记上添加相应标签t，使得其标记从L_X(A)安全地变化到L′_X(A)；类似地，对于主体A，其对自身不论机密性标记或者完整性标记执行标签删除操作需要遵循

规则，即当主体A拥有权限

时，才能从其现有标记上删除相应标签t，使得其标记从L_X(A)安全地变化到L′_X(A)。In the above-mentioned security information flow rules that support identity traceability, for subject A, it needs to follow

rule, that is, when subject A has permission

Only when the corresponding label t can be added to its existing label, so that its label can be safely changed from L _X (A) to L′ _X (A); similarly, for subject A, it does not care about the confidentiality label or integrity flags to perform tag removal operations need to follow

rule, that is, when subject A has permission

, the corresponding label t can be deleted from its existing label, so that its label can safely change from L _X (A) to L′ _X (A).

其中X表示S和I，实体E对其他授权是安全的。Permission granting rules, if and only if an entity (such as entity E) has the ownership of its token, the entity can safely grant its permission to other entities, that is, when

where X denotes S and I, and entity E is secure to other authorizations.

S2. Based on the trusted authority center, the data owner marks the data and uploads it to the cloud, and at the same time entrusts the data access authority to the trusted authority center for management;

Specifically, the data owner needs to register with the trusted authority center to legally request tags to mark the data; the data owner is composed of IoT devices and corresponding IoT gateways; IoT devices generally refer to IoT sensors and devices with data collection functions etc., are mainly responsible for collecting raw data from the real physical world, and transmitting the raw data to the IoT gateway; the gateway first requests the confidentiality mark, integrity tag and owner tag; then the trusted authority center generates tags based on the shared list and distributes them to the data owner; then the data owner uses the confidentiality tag, integrity tag, and owner tag in the gateway to mark the files that need to be uploaded. At the same time, the data owner entrusts the data access authority to the trusted authority center to manage and upload the marked data to the cloud.

Wherein, the sharing list released by the data owner mainly includes the attribute information of the data users with whom the data owner is willing to share data.

The trusted authority center is mainly responsible for assigning unique IDs to participants, calculating and distributing tags, hosting data access rights, maintaining legal whitelists, and securely storing track data. entity; the maintenance of the legitimate whitelist refers to maintaining a safe and trusted whitelist containing legitimate users.

The cloud is mainly used to store data uploaded by data owners, implement security information flow rules, and deliver data. The data delivery mentioned here refers to delivering the data requested by the data user to the user.

S3. Based on the tags and labels distributed by the trusted authority center, data users send the received tags and tags as part of the data request parameters to the cloud to request the data they need;

Specifically, when requesting data, the data user first registers with the trusted authority center to legally request the data, and the trusted authority center calculates the confidentiality mark, integrity mark, and owner label based on the attribute information provided by the data user when registering and These tags are distributed to data users, and data users send the received tags and tags as part of the data request parameters to the cloud to request the data they need.

Among them, the data user is the data requester.

S4. Based on the security information flow rules of the fine-grained distributed information flow control model that supports identity traceability, the cloud makes data sharing decisions on the data requests of data users;

Specifically, the cloud first executes the security information flow rules to decide whether to share the data with the data requester.

In addition, the result of the cloud executing the security information flow rules is a Boolean type, whose values are true and false respectively, but no matter whether the data sharing decision is true or false, the cloud will generate trajectory data based on the owner tags of the data owner and data user Stored in a trusted authority center.

S5. When the data sharing decision is true, the trusted authority center verifies the identity of the data user;

Specifically, when the execution result of the security information flow rule is true, that is, the data sharing decision is true, the cloud will feed back the data sharing decision to the trusted authority center, and at the same time, the trajectory generated based on the owner tags of the data owner and data user The data is sent to the trusted authority center for storage; the trusted authority center verifies the identity of the data user according to the trajectory data and the maintained white list.

However, when the execution result of the security information flow rule is false, that is, the data sharing decision is false, and the data request of the data user is ended, the cloud will feed back the data sharing decision to the trusted authority center, and at the same time, based on the data owner and data user's The trajectory data generated by the owner tag is sent to the trusted authority center for storage.

S6. When the identity verification result is true, the trusted authority center grants the data access authority to the data user, and at the same time, the cloud delivers the data to the data user.

Specifically, when the identity verification result is true, the trusted authority center grants the data access authority to the data user, and at the same time feeds back the identity verification result to the cloud; the cloud delivers the data to the data user according to the identity verification result; Data users access data according to the granted access rights.

However, when the identity verification result is false, the trusted authority center terminates the authorization and at the same time feeds back the false identity verification result to the cloud; the cloud terminates data sharing based on the false identity verification result.

Therefore, through the above method, data owners, data users, cloud and trusted authority centers can realize the confidentiality and integrity protection of data in the sharing process, and can resist collusion attacks and support traceability of data flow, that is, data can be tracked Requester identity information.

As a further preferred embodiment of this method, it also includes that the data owner uses its owner tag to mark the uploaded data, and the data user requests data from the cloud based on the owner tag, based on the fine-grained distributed information flow control model that supports identity traceability Supports security information flow rules with traceable identities, and the identity of data users can be traced by querying owner tags and track data.

The beneficial effects of the present invention specifically include:

1) Data confidentiality. During the data sharing process, the data uploaded by the data owner stored in the cloud cannot be accessed by unauthorized users, including the honest but curious cloud.

2) Data integrity, during the data sharing process, the content of the marked data cannot be destroyed by unauthorized entities.

3) The identity can be traced. When the data is requested or accessed maliciously, the trusted authority center can promptly disclose the ID of the user who initiated the request or access operation.

The above is a specific description of the preferred implementation of the present invention, but the invention is not limited to the described embodiments, and those skilled in the art can also make various equivalent deformations or replacements without violating the spirit of the present invention. , these equivalent modifications or replacements are all within the scope defined by the claims of the present application.

Claims (10)

1. A safe sharing method of traceable data under the environment of a cloud-assisted Internet of things is characterized by comprising the following steps:

constructing a fine-grained distributed information flow control model supporting identity traceability, wherein the fine-grained distributed information flow control model supporting identity traceability comprises an entity, a label, a mark, a security environment, a security domain, an owner label, a distributed authority, a security information flow rule and a security information flow rule supporting identity traceability;

based on the trusted authority center, the data owner marks the data and uploads the data to the cloud, and meanwhile, the data access authority is delegated to the trusted authority center for management;

based on the label and the label distributed by the trusted authority center, the data user sends the received label and the label to the cloud end as a part of data request parameters to request the required data;

based on a safety information flow rule of a fine-grained distributed information flow control model supporting identity traceability, a cloud carries out a data sharing decision on a data request of a data user;

when the data sharing decision is true, the trusted authority center checks the identity of the data user;

and when the identity verification result is true, the trusted authority center grants the data access authority to the data user, and meanwhile, the cloud delivers the data to the data user.

2. The method for secure sharing of traceable data in a cloud-assisted internet of things environment according to claim 1, wherein the fine-grained distributed information flow control model supporting identity traceability further comprises: entity creation rules, privilege-based flag change rules, and permission grant rules.

3. The method for safely sharing the traceable data in the cloud-assisted internet of things environment according to claim 2, wherein the entity creation rule is specifically as follows:

in the above formula, the first and second carbon atoms are,

the presentation agent A may create an entity A', L _X Indicating a confidentiality or integrity marker, t _O Denotes an owner label, L _X (A′):＝L _X (A) Indicating that the entity A' being created inherits the confidentiality flag or the integrity flag of the subject A, t _O (A′):＝t _O (A) Indicating that the created entity a' inherits the owner label of the subject a,

indicating that the entity a' for which the agent a created assigns corresponding rights.

4. The method for safely sharing the traceable data in the cloud-assisted internet-of-things environment according to claim 1, wherein the step of, based on the trusted authority center, a data owner marking and uploading the data to a cloud and delegating a data access right to the trusted authority center for management comprises:

the data owner generates a sharing list and sends the sharing list to the trusted authority center to request marking;

the trusted authority center generates a label according to the sharing list and distributes the label to the data owner;

a data owner marks data to be uploaded in a gateway by using a confidentiality mark, an integrity mark and an owner label respectively;

and uploading the marked data to the cloud end by the data owner, and delegating the data access authority to a trusted authority center for management.

5. The method for securely sharing traceable data in a cloud-assisted internet of things environment according to claim 1, wherein the step of verifying the identity of the data user by the trusted authority center when the data sharing decision is true specifically comprises:

when the data sharing decision is true, the cloud end feeds the data sharing decision back to the trusted authority center, and meanwhile, the track data generated based on the owner labels of the data owner and the data user are sent to the trusted authority center to be stored;

and the trusted authority center performs identity verification on the data user according to the track data and the maintained white list.

6. The method for secure sharing of traceable data in a cloud-assisted internet of things environment according to claim 5, further comprising:

and when the data sharing decision is false, finishing the data request of the data user, feeding the data sharing decision back to the trusted authority center by the cloud, and simultaneously sending the track data generated based on the owner labels of the data owner and the data user to the trusted authority center for storage.

7. The method according to claim 1, wherein the step of granting the data access right to the data user by the trusted authority center and delivering the data to the data user by the cloud end when the identity verification result is true includes:

when the identity verification result is true, the trusted authority center grants the data access authority to the data user, and meanwhile, the identity verification result is fed back to the cloud end;

the cloud delivers the data to the data user according to the result that the identity verification is true;

and the data user accesses the data according to the granted access authority.

8. The method for secure sharing of traceable data in a cloud-assisted internet of things environment according to claim 7, further comprising:

when the identity verification result is false, the trusted authority center stops granting the data access authority, and meanwhile, the result that the identity verification is false is fed back to the cloud end;

and the cloud end terminates the data sharing according to the result that the identity verification is false.

9. The method for secure sharing of traceable data in a cloud-assisted internet of things environment according to claim 1, further comprising:

the data owner marks the uploaded data by using the owner label;

the data user requests data from the cloud based on the owner tag;

and obtaining the flow direction of the data among the main bodies according to the owner label based on the identity traceability supporting safety information flow rule of the identity traceability supporting fine-grained distributed information flow control model.

10. The method according to claim 9, wherein the identity traceability supporting security information flow rule is specifically as follows:

in the above formula, L _S (A) A confidentiality flag, L, indicating the subject A _I (A) An integrity flag, L, representing the subject A _S (B) Confidentiality flag, L, indicating subject B _I (B0 represents the integrity flag of the body B,

denotes a safety information flow rule, A → B denotes an information flow direction from the body A to the body B, t _O (A) Owner label, t, representing a subject A _O (B) An owner label representing the body B,

track data indicating the flow of the recorded information,

indicating that the information flow between the agent A and the agent B is generated regardless of whether the information flow between the agent A and the agent B follows the safety information flow rule

Images