分层的属性加密机制研究

发布时间：2018-12-16 09:49

【摘要】：属性加密机制是一种支持多对多模式的新型公钥加密。在属性加密机制中,身份信息不再只是由一个元素来表示,而是添加了一个灵活的访问结构,该访问结构由若干个属性以及门限组合而成,当且仅当访问结构和属性集合相匹配时,才能够成功解密。属性加密机制的最大优点是,不需要具体指定由谁解密,只要接收方符合相应条件便可解密。通常,属性加密机制被分为两大类:基于密钥策略的属性加密机制和基于密文策略的属性加密机制。本论文将以基于密钥策略的属性加密机制为主要研究对象。本论文首先对属性加密机制进行了系统的介绍,属性加密机制可分为基本属性加密机制,基于密钥策略的属性加密机制,基于密文策略的属性加密机制以及将属性集分层的属性加密机制,在本论文中对这四种属性加密机制进行了十分详细的描述。其次,着重介绍了基于密钥策略的属性加密机制和将属性集分层的属性加密机制,基于密钥策略的属性加密机制的主要优点是它添加了一个访问结构,该访问结构可以使得访问控制更加灵活,将属性集分层的属性加密机制的优点是可以解决由于广泛的配对操作产生的效率低下的问题,提高了算法的效率。因为未分层的属性加密在密钥生成的过程中每一个属性都需要对应一个生成的子密钥,而对于分层的属性加密来说只需要拥有几个属性所共同祖先节点的属性,并生成这个祖先节点的属性的密钥就可以了。最后,在前述归纳整理工作的基础上,提出了一种改进的分层的基于密钥策略的属性加密方案,该方案:(1)将访问结构引入到方案中,该访问结构是嵌入到密钥中的,由密钥的持有人对该结构进行控制,使得访问控制的灵活性提高了。(2)将属性集中的属性分成树状结构,每个属性不再是一个单独的个体,同一棵属性树间的属性相互联系,若x为一棵属性树中的一个节点,那么同一棵属性树中深度比x大的节点的属性它都具备,因此就不需要一对一的配对操作,若要一个用户拥有若干个同一棵属性树中深度比x大的节点的属性,则不需要每个属性都具备,只需拥有x节点的属性即可,其优点是解决了属性加密由于广泛的配对操作产生的效率低下的问题。(3)进行了安全性证明以及效率分析。
[Abstract]:Attribute encryption mechanism is a new type of public key encryption supporting many-to-many modes. In the attribute encryption mechanism, identity information is no longer represented by an element, but a flexible access structure is added, which is composed of several attributes and thresholds. If and only if the access structure matches the attribute set, it can be decrypted successfully. The biggest advantage of the attribute encryption mechanism is that it does not need to specify who decrypts, so long as the receiver meets the corresponding conditions can be decrypted. Generally, attribute encryption is divided into two categories: attribute encryption based on key policy and attribute encryption based on ciphertext policy. This thesis will focus on the attribute encryption mechanism based on key policy. This paper firstly introduces the attribute encryption mechanism. The attribute encryption mechanism can be divided into basic attribute encryption mechanism and attribute encryption mechanism based on key policy. The attribute encryption mechanism based on ciphertext policy and the attribute encryption mechanism based on stratification of attribute set are described in detail in this paper. Secondly, the attribute encryption mechanism based on key policy and attribute encryption mechanism based on attribute set are introduced. The main advantage of attribute encryption mechanism based on key policy is that it adds an access structure. This access structure can make access control more flexible. The advantage of attribute encryption mechanism is that it can solve the problem of low efficiency caused by extensive pairing operation and improve the efficiency of the algorithm. Because unstratified attribute encryption requires a generated subkey for each attribute during key generation, for hierarchical attribute encryption, only the attributes of the ancestor nodes shared by several attributes are required. And generate the key for the attribute of the ancestor node. Finally, an improved hierarchical attribute encryption scheme based on key policy is proposed on the basis of the above work. (1) access structure is introduced into the scheme, and the access structure is embedded in the key. By controlling the structure by the key holder, the flexibility of access control is improved. (2) the attributes in the attribute set are divided into tree structure, each attribute is no longer a separate individual, If x is a node in an attribute tree, then the attributes of the nodes in the same attribute tree that are deeper than x have them, so there is no need for a one-to-one pairing operation. For a user to have several attributes of nodes deeper than x in the same attribute tree, you do not need to have each attribute; you simply have the attributes of the x node Its advantage is to solve the problem that attribute encryption is inefficient due to extensive matching operations. (3) Security proof and efficiency analysis are carried out.
【学位授予单位】：西安电子科技大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TN918.4

【相似文献】