摘要
属性基加密机制能够为云环境下的数据分享和管理提供灵活的访问控制方案。然而,传统的属性基加密方案存在解密复杂度高和属性撤销困难的问题,导致属性基加密机制在实际中的应用受限。针对上述问题,文章提出一种支持撤销属性和外包解密的密文策略属性基加密方案,该方案在属性撤销过程只需更新对应的密文组件,有效降低密文更新的计算开销,并且属性撤销过程对用户是透明的,用户不需要参与密文和密钥的更新,减少了属性撤销对用户的影响。同时,引入解密代理将解密过程中计算开销较大的部分外包到服务端,降低用户端解密开销。安全性分析表明,该方案可以抵抗联合共谋以及选择性明文攻击,并通过对比分析得到该方案在密文更新和解密过程的计算开销均具有一定的优势。
The attribute-based encryption mechanism provides a flexible access control scheme for data sharing and management in a cloud environment.However,the traditional attribute-based encryption scheme has the problems of high decryption complexity and difficulty in attribute revocation,which leads to limited application of the attribute-based encryption mechanism in practice.Aiming at the above problems,this paper proposes a ciphertext-policy attribute-based encryption scheme,which only needs to update the corresponding secret in the attribute revocation process.The text component effectively reduces the computational cost of the ciphertext update,and the attribute revocation process is transparent to the user.The user does not need to participate in the ciphertext and the key update,thereby reducing the impact of the attribute revocation on the user.At the same time,the decryption agent is introduced to outsource the part with large computational cost in the decryption process to the server,thereby reducing the decryption overhead of the client.Security analysis shows that this scheme can resist joint collusion and selective plaintext attacks.Finally,through comparative analysis,the scheme has certain advantages in the computational overhead of the ciphertext update and decryption process.
作者
刘鹏
何倩
刘汪洋
程序
LIU Peng;HE Qian;LIU Wangyang;CHENG Xu(CETC Big Data Research Institute Co.,Ltd.,Guiyang 550018,China;Guangxi Key Laboratory of Cryptography and Information Security,Guilin University of Electronic Technology,Guilin 541004,China)
出处
《信息网络安全》
CSCD
北大核心
2020年第3期90-97,共8页
Netinfo Security
基金
国家自然科学基金[61661015]
广西云计算与大数据协同创新基金[YD16801,C77KYS02SX18]
广西创新驱动重大专项[AA17202024]
广西密码学与信息安全重点实验室基金[CIS201701]。
关键词
属性基加密
访问控制
属性撤销
外包解密
attribute-based encryption
access control
attribute revocation
outsourcing decryption
