标准模型下可证明安全的支持大规模属性集与属性级用户撤销的CP-ABE方案

发布时间：2018-01-16 19:21

本文关键词：标准模型下可证明安全的支持大规模属性集与属性级用户撤销的CP-ABE方案　出处：《电子与信息学报》2017年12期 　论文类型：期刊论文

【摘要】：密文策略属性加密方案,特别是不受某个特定值限制的大规模属性集下的密文策略属性加密方案在云存储中得到了越来越广泛的应用,它能够实现细粒度的访问控制。但是在原始的属性加密方案中,解决动态的用户与属性撤销,是当前面临的重要挑战。为了解决这一问题,该文提出一个标准模型下可证明安全的支持大规模属性集的密文策略属性加密方案,该方案能够实现属性级的用户撤销,即若用户的某个属性被撤销,不会影响该用户其他合法属性的正常访问。为了实现撤销,将密钥分为两部分:为用户生成的私钥以及为云存储中心生成的授权密钥。在该方案中,若用户的属性被撤销,那么该属性对应的密文将进行更新,只有该属性没有被撤销的用户才能够成功地进行密钥更新而解密密文。该文基于q-type假设在标准模型下对方案进行了选择访问结构明文攻击的安全性证明。最后对方案进行了性能分析与实验验证,实验结果表明,与已有相关方案相比,虽然为了实现属性撤销,增加了存储中心的计算负载,但是不需要属性中心的参与,因此降低了属性中心的计算负载,而且用户除了密钥外不需要其它额外参数来实现属性撤销,因此大大节省了存储空间。
[Abstract]:Ciphertext policy attribute encryption scheme, especially the ciphertext policy attribute encryption scheme under the large-scale attribute set which is not limited by a particular value, has been more and more widely used in cloud storage. It can achieve fine-grained access control, but in the original attribute encryption scheme, it is an important challenge to solve the dynamic user and attribute revocation. In this paper, we propose a secure cryptographic policy attribute encryption scheme which can support large-scale attribute sets under the standard model. This scheme can realize attribute level user revocation, that is, if a user's attribute is revoked. In order to achieve revocation, the key is divided into two parts: the private key generated for the user and the authorization key generated for the cloud storage center. If the user's property is revoked, the ciphertext corresponding to the attribute is updated. Only the user whose attribute has not been revoked can successfully update the key and decrypt the ciphertext. Based on the q-type assumption, this paper presents a security certificate for selecting access structure plaintext attacks on the scheme under the standard model. Finally, the performance analysis and experimental verification of the scheme are carried out. The experimental results show that, in order to realize the attribute revocation, the computing load of the storage center is increased, but the participation of the attribute center is not required, so the computing load of the attribute center is reduced. Besides the key, the user does not need any additional parameters to realize the attribute revocation, so the storage space is saved greatly.
【作者单位】：电子技术研究所;信息工程大学;
【基金】：国家973计划项目(2013CB338001)~~
【分类号】：TN918.4
【正文快照】： (2)(信息工程大学郑州450000)Sahai等人[1]在2005年提出了属性加密(Attribute-Based Encryption,ABE)的概念,将密文与密钥与一系列的属性相关联,通过定义访问结构,指定能够解密数据的属性集合,实现细粒度的访问控制,属性加密方案凭借其灵活的访问结构在云存储中得到了广泛的应

【相似文献】