Patent ID: 9646168
Date: 2017-05-09
CPC Classifications: G06F,H04L

Claim:
1. A data access control method in which a data owner unit, a manager unit and a cloud perform data access control in conjunction with one another in cloud computing, the method comprising: requesting, by the data owner unit, generation of a data encryption key (DEK) from the manager unit; generating, by the manager unit, the DEK; generating, by the manager unit, a result of Ciphertext Policy-Attribute Based Encryption (CP-ABE) of the DEK and, a secret key used to decrypt the result of the CPABE encryption, and then responding, by the manager unit, to the data owner unit; obtaining, by the data owner unit, the DEK by performing CP-ABE decryption of the result of the CP-ABE encryption using the secret key; encrypting, by the data owner unit, data with, the obtained DEK; and uploading, by the data owner unit, the encrypted data and DEK information to the cloud, wherein requesting the generation of the DEK from the manager unit comprises requesting the generation of the DEK by identification (ID) of the data owner unit to the manager unit.