Sensor-cloud combines the merits of WSN with cloud computing and has been deployed in many practical applications. Data security is the prerequisite for the implementation of a sensor-cloud system, but conventional security mechanisms cannot fully satisfy the several new security demands arisen in this scenario. To address the challenge of flexible and secure data sharing, in this paper, we design an attribute based data access management scheme for sensor-cloud (ABDM-SC). We take the advantages of attribute based cryptography and hash proof primitive to realize fine-grained access control and efficient user authentication. The data captured by the sensors are labeled by attributes and can only be accessed by users processing the valid credentials. During the data sharing procedure, the cloud side and user side only need to conduct one round of interaction. By security proof and performance evaluation, our ABDM-SC is equipped with high security level and satisfactory efficiency.

Sensor-cloud 结合了 WSN 和云计算的优点，并已部署在许多实际应用中。数据安全是传感器云系统实施的前提，但传统的安全机制不能完全满足这种场景下出现的几种新的安全需求。为了应对灵活安全的数据共享挑战，在本文中，我们设计了一种基于属性的传感器云数据访问管理方案（ABDM-SC）。我们利用基于属性的密码学和哈希证明原语的优势来实现细粒度的访问控制和高效的用户身份验证。传感器捕获的数据由属性标记，只能由处理有效凭证的用户访问。在数据共享过程中，云侧和用户侧只需要进行一轮交互。通过安全证明和性能评估，我们的ABDM-SC具有高安全级别和令人满意的效率。