可追责并解决密钥托管问题的属性基加密方案

发布时间：2018-07-21 13:45

【摘要】：属性基加密(attribute-based encryption,ABE)用于对存储在第三方的加密数据的细粒度共享.在ABE中:1)由于密钥不包含用户的身份信息,用户可以共享他她的密钥而不被发现;2)密钥生成中心(key generation center,KGC)可以生成带有任意属性集或访问结构的密钥;3)KGC可以用它的主密钥解密任意的密文.这3类问题的存在,使得使用ABE的系统中的数据面临极大的安全挑战.提出一个可追责并解决密钥托管问题的属性基加密方案(accountable key-policy attribute-based encryption scheme without key escrow,WoKE-AKP-ABE),包含2个机构:KGC和属性机构(attribute authority,AA),KGC生成用户密钥中与身份相关的部分,KGC和AA联合生成用户密钥中与属性相关的部分,在判定双线性Diffie-Hellman假设下达到了选择属性集模型下的选择明文安全,不仅可以抵抗恶意的用户或者机构的攻击,还可以抵抗用户与机构的合谋攻击,能够实现对于解密器的黑盒追踪.
[Abstract]:Attribute-based encryption Abe is used for fine-grained sharing of encrypted data stored in third parties. Because the key does not contain the user's identity information, The user can share his or her key without being discovered. The key generation center (key generation center-KGC) can generate a key with any attribute set or access structure 3) KGC can decrypt any ciphertext with its master key. The existence of these three kinds of problems makes the data in the system using Abe face a great security challenge. In this paper, a accountable key-policy attribute-based encryption scheme without key crowning WoKE-AKP-ABE scheme is proposed, which includes two organizations: KGC and attribute authority AA / KGCs to generate the identity-related part of the user's key and the joint generation of the user's identity by using the accountable key-policy attribute-based encryption scheme without key crowning and key escrow problem (WKE-AKP-ABE), which includes two organizations: KGCs and attribute authorities. The part of the key related to the attribute, In the decision bilinear Diffie-Hellman hypothesis, the selector is secure under the selection attribute set model, which can not only resist the malicious user or mechanism attack, but also resist the collusion attack between the user and the mechanism. Can realize the black box tracing for the decryptor.
【作者单位】：北京大学信息科学技术学院;北京大学软件与微电子学院;北京大学软件工程国家工程研究中心;
【基金】：国家“八六三”高技术研究发展计划基金项目(2015AA016009) 国家自然科学基金项目(61232005) 深圳市科技计划基金项目(JSGG20140516162852628)
【分类号】：TN918.4

【参考文献】