Tenant-Led Ciphertext Information Flow Control for Cloud Virtual Machines

When users upload their private data to the cloud, they lose control of stored in cloud server. If system cannot provide an effective security mechanism protect data, consequent leakage issue will hinder development computing. Conventional access and encryption technologies effectively propagation tenant system. The mandatory one-way information flow model is limited by complexity environment, it difficult cloud. To solve above problems, this article proposes a tenant-led ciphertext method for virtual machines. Through design decentralized policy, secret-domain key management scheme, multi-ID-based threshold strategies taint infection, secret-level reduction, ability are realized form, which can prevent malicious inside outside from illegally reading data. feasibility verified proof experiment.