Access control based on group signatures in cloud service

As the user´s identity and sensitive information are regularly used in the process of cloud service access control, there will be a need to protect the user privacy from disclosing to cloud provider. This paper describes a new access control policy based on group signatures in cloud service, which allows users to access the cloud services on behalf of group and prevents users from disclosing their privacy to the cloud service provider. To build our access control policy, we construct a double center access control model. On this basis, a scheme of access control based on group signatures is given, which is derived from of the short group signature. This scheme can manage multi-groups and validate the group certificates of users. We also prove the correctness of our scheme.