支持树形访问结构的多权威基于属性的签名方案

发布时间：2018-07-14 14:26

【摘要】：基于属性的签名能够实现细粒度的访问控制,被认为是云计算环境中一种重要的匿名认证手段。但常见的属性基签名只能通过门限结构提供简单的访问控制,无法应对云环境中的大规模用户属性集。同时,用户属性集由唯一的属性权威管理,增加了属性权威的计算和存储开销,一旦属性权威被攻破,整个系统就会面临崩溃的风险。针对以上问题,提出了一种支持树形访问结构的多权威属性签名方案,可以支持任意形式的与、或和门限结构,提供了更灵活的访问控制。将用户属性集由不同属性权威分类管理,减少开销的同时也降低了系统的风险。此外,在随机预言机模型下证明了方案是给定策略选择消息攻击(SP-CMA)安全的。
[Abstract]:Attribute-based signature can achieve fine-grained access control and is considered to be an important anonymous authentication method in cloud computing environment. However, common attribute base signature can only provide simple access control through threshold structure, and can not cope with large-scale user attribute set in cloud environment. At the same time, the user attribute set is managed by the unique attribute authority, which increases the computing and storage cost of the attribute authority. Once the attribute authority is breached, the whole system will face the risk of collapse. Aiming at the above problems, a multi-authority attribute signature scheme supporting tree-shaped access structure is proposed, which can support arbitrary and, or, and threshold structures, and provide more flexible access control. The user attribute set is managed by different attribute authority, which reduces the overhead and reduces the risk of the system. In addition, it is proved that the scheme is secure for a given policy selective message attack (SP-CMA) under the random oracle model.
【作者单位】：西安电子科技大学网络与信息安全学院;新加坡管理大学信息系统学院;南京邮电大学计算机学院软件学院;
【基金】：国家自然科学基金资助项目(No.U1135002,No.U1405255) 国家高技术研究发展计划(“863”计划)基金资助项目(No.2015AA016007,No.2015AA017203)~~
【分类号】：TP309

【相似文献】