固定通信代价的属性密码方案的研究

发布时间：2019-05-12 13:55

【摘要】：随着网络科技的推动,经济全球化的深度变革,互联网空间竞争越来越尖锐复杂。同时,随着移动互联网、物联网、云计算等以大数据模式为代表的新型网络形态及网络服务的兴起,新型网络应用需求产生的云安全通信也得到了大家的关注。基于云环境的企业主要的通信方式已由单一用户的双方通信转变为单用户向至少有一方是多用户的通信。在实际生活中,许多企业为了制定企业下一步的工作计划,利用第三方云通信平台进行网络会议。然而,由于这些第三方云通信平台相对于服务提供商是公开透明的,当第三方云通信被攻破时,攻击者可以任意窃听云通信企业的商业机密。现在,大多数安全通信的实现使用的是SSL/TLS协议,该协议采用对通信数据进行加密方式保证通信数据不被窃听。但是,带有传统加密算法的SSL/TLS协议中加密算法不能高效地解决网络会议中通信会话密钥分发问题。其主要原因是传统的加密方案是一对一的加密方案,如果一个人要安全地传输一个会话密钥给其他人,那么他需要利用那些想要参加云网络会议的人的公钥对同一会话密钥反复进行加密。而且,在给其他人加密会话密钥之前,这些人需要传输他们的公钥给执行加密操作的人,这样就造成了通信代价的增加。本课题针对云环境中企业如何高效地建立安全通信的问题进行了深入的研究,利用一种新型的一对多的属性基加密方案,并实现了一种新型加密会话密钥的方式。本文贡献和创新点主要有以下几个部分:1.本文在现有的属性基加密方案的基础上,提出了基于固定通信代价并可撤销用户权限的属性基加密方案。相对于已有的加密方案而言,本文的加密方案是固定通信代价的,并且是可以有效撤销用户解密权限的加密方案。除此之外,本文的方案是基于一种属性评分分组系统,该系统扩展了属性基加密方案容忍用户身份信息的能力。2.在通信效率和计算效率分析方面,本文得出基于固定通信代价的属性基加密方案的通信效率和计算效率均优于以前提出的大多数属性基加密方案。3.通过形式化的安全性证明模型的方式,本文证明了本方案具有两个方面的安全能力。第一个是在标准模型下具有抵抗自适应选择密文攻击的能力,另一个是用户密钥的认证具有不可伪造性,即没有一个用户有能力能够伪造一个不符合权限的属性集合评分分组去欺骗任何一个子公司节点。4.本文通过引入代数学中扩域的基本知识,实现了基于有限域的公钥加密方案。利用快速加密的方案,本文可以实现对会话密钥的快速加密。
[Abstract]:With the promotion of network science and technology and the deep change of economic globalization, the competition of Internet space is becoming more and more acute and complex. At the same time, with the rise of new network form and network service, such as mobile Internet, Internet of things, cloud computing and so on, the cloud security communication caused by the demand of new network application has also been paid more and more attention. The main communication mode of enterprise based on cloud environment has changed from single-user communication to multi-user communication with at least one user. In real life, in order to make the next work plan of the enterprise, many enterprises use the third party cloud communication platform to carry on the network meeting. However, because these third-party cloud communications platforms are open and transparent relative to service providers, when third-party cloud communications are breached, attackers can wiretap the business secrets of cloud communications companies arbitrarily. At present, most of the implementation of secure communication uses SSL/TLS protocol, which uses encryption of communication data to ensure that communication data is not bugged. However, the encryption algorithm in SSL/TLS protocol with traditional encryption algorithm can not solve the problem of communication session key distribution in network conference efficiently. The main reason is that the traditional encryption scheme is one-to-one encryption scheme, if one person wants to safely transmit a session key to others, Then he needs to encrypt the same session key over and over again using the public key of those who want to attend a cloud conference. Moreover, before encrypting the session key to others, these people need to transmit their public key to the person who performs the encryption operation, which increases the communication cost. In this paper, the problem of how to establish secure communication efficiently in cloud environment is deeply studied, and a new way of encrypting session key is implemented by using a new one-to-many attribute base encryption scheme. The contributions and innovations of this paper are as follows: 1. Based on the existing attribute-based encryption schemes, an attribute-based encryption scheme based on fixed communication cost and revoked user rights is proposed in this paper. Compared with the existing encryption scheme, the encryption scheme in this paper is fixed communication cost, and can effectively revoke the user decryption authority encryption scheme. In addition, the scheme in this paper is based on an attribute scoring grouping system, which extends the ability of attribute-based encryption scheme to tolerate user identity information. In the analysis of communication efficiency and computational efficiency, it is concluded that the communication efficiency and computational efficiency of attribute-based encryption scheme based on fixed communication cost are better than those of most of the previous attribute-based encryption schemes. Through the formal security proof model, this paper proves that the scheme has two aspects of security capabilities. The first is the ability to resist adaptive ciphertext attacks under the standard model, and the other is that the authentication of user keys is non-forgery. That is, no user has the ability to forge an attribute set score group that does not conform to permissions to deceive any subsidiary node. 4. In this paper, a public key encryption scheme based on finite field is implemented by introducing the basic knowledge of extending domain in algebra. Using the scheme of fast encryption, this paper can realize the fast encryption of session key.
【学位授予单位】：西华大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TN918

【相似文献】