云存储环境下支持属性撤销的属性基加密方案

孙磊; 赵志远; 王建华; 朱智强

doi:10.11959/j.issn.1000-436x.2019116

您当前的位置：

首页 >

文章列表页 >

云存储环境下支持属性撤销的属性基加密方案

学术论文 | 更新时间：2024-06-05

- 云存储环境下支持属性撤销的属性基加密方案
- Attribute-based encryption scheme supporting attribute revocation in cloud storage environment
- 通信学报 2019年40卷第5期页码：47-56
- 作者机构：
  
  1. 战略支援部队信息工程大学三院，河南郑州 450001
  2. 61516部队，北京 100062
- 作者简介：
  
  [ "孙磊（1973- ），男，江苏靖江人，博士，战略支援部队信息工程大学教授，主要研究方向为云计算、计算机网络、信息安全等。" ]
  [ "赵志远（1989- ），男，吉林磐石人，61516部队工程师，主要研究方向为云计算、信息安全和公钥密码等。" ]
  [ "王建华（1962- ），男，北京人，博士，战略支援部队信息工程大学教授，主要研究方向为密码学、信息安全、计算机网络等。" ]
  [ "朱智强（1961- ），男，吉林长春人，博士，战略支援部队信息工程大学教授，主要研究方向为云计算、网络与信息安全、密码学等。" ]
- 基金信息：
  
  国家重点基础研究发展计划（“973”计划）基金资助项目(2013CB338000);国家重点研发计划基金资助项目(2016YFB0501900)
- DOI：10.11959/j.issn.1000-436x.2019116
  中图分类号： TP309
- 网络出版日期：2019-05，
  
  纸质出版日期：2019-05-25
- 稿件说明：
移动端阅览
孙磊, 赵志远, 王建华, 等. 云存储环境下支持属性撤销的属性基加密方案[J]. 通信学报, 2019,40(5):47-56.

Lei SUN, Zhiyuan ZHAO, Jianhua WANG, et al. Attribute-based encryption scheme supporting attribute revocation in cloud storage environment[J]. Journal on communications, 2019, 40(5): 47-56.
孙磊, 赵志远, 王建华, 等. 云存储环境下支持属性撤销的属性基加密方案[J]. 通信学报, 2019,40(5):47-56. DOI： 10.11959/j.issn.1000-436x.2019116.

Lei SUN, Zhiyuan ZHAO, Jianhua WANG, et al. Attribute-based encryption scheme supporting attribute revocation in cloud storage environment[J]. Journal on communications, 2019, 40(5): 47-56. DOI： 10.11959/j.issn.1000-436x.2019116.

摘要

属性基加密因其细粒度访问控制在云存储中得到了广泛应用。在属性基加密方案中，每个属性可能同时被多个用户共享，因此如何实现属性级用户撤销且能够抵抗用户合谋攻击是当前面临的重要挑战。针对上述问题，提出了一种支持属性撤销的属性基加密方案，所提方案可以有效地抵抗撤销用户与未撤销用户的合谋攻击，同时，将复杂的解密计算外包给具有强大计算能力的云服务商，减轻了数据用户的计算负担。在标准模型下，基于计算性Diffie-Hellman假设完成安全证明。最后从理论和实验2个方面对所提方案的效率与功能进行分析，结果表明所提方案可以安全地实现属性级用户撤销，并具有快速解密的能力。

Abstract

Attribute-based encryption (ABE) scheme is widely used in the cloud storage due to its fine-grained access control.Each attribute in ABE may be shared by multiple users at the same time.Therefore

how to achieve attribute-level user revocation is currently facing an important challenge.Through research

it has been found that some attribute-level user revocation schemes currently can’t resist the collusion attack between the revoked user and the existing user.To solve this problem

an attribute-based encryption scheme that supported the immediate attribute revocation was proposed.The scheme could achieve attribute-level user revocation and could effectively resist collusion attacks between the revoked users and the existing users.At the same time

this scheme outsourced complex decryption calculations to cloud service providers with powerful computing ability

which reduced the computational burden of the data user.The scheme was proved secure based on computational Diffie-Hellman assumption in the standard model.Finally

the functionality and efficiency of the proposed scheme were analyzed and verified.The experimental results show that the proposed scheme can safely implement attribute-level user revocation and has the ability to quickly decrypt

which greatly improves the system efficiency.

关键词

Keywords

references

SUBASHINI S , KAVITHA V . A survey on security issues in service delivery models of cloud computing [J ] . Journal of Network and Computer Applications , 2011 , 34 ( 1 ): 1 - 11 .

SAHAI A , WATERS B . Fuzzy identity-based encryption [C ] // The 24th Annual International Conference on the Theory and Applications of Cryptographic Techniques . 2005 : 457 - 473 .

姚亮 , 杨超 , 马建峰 , 等 . 云端数据访问控制中基于中间代理的用户撤销新方法 [J ] . 通信学报 , 2015 , 36 ( 11 ): 92 - 101 .

YAO L , YANG C , MA J F , et al . New user revocation approach based on intermediate agency for cloud data access control [J ] . Journal on Communications , 2015 , 36 ( 11 ): 92 - 101 .

GOYAL V , PANDEY O , SAHAI A , et al . Attribute-based encryption for fine-grained access control of encrypted data [C ] // The 13th ACM Conference on Computer and Communications Security . ACM , 2006 : 89 - 98 .

BETHENCOURT J , SAHAI A , WATERS B . Ciphertext-policy attribute-based encryption [C ] // IEEE Symposium on Security and Privacy . IEEE , 2007 : 321 - 334 .

SOOKHAK M , YU F R , KHAN M K , et al . Attribute-based data access control in mobile cloud computing:Taxonomy and open issues [J ] . Future Generation Computer Systems , 2017 , 72 ( C ): 273 - 287 .

李勇 , 曾振宇 , 张晓菲 . 支持属性撤销的外包解密方案 [J ] . 清华大学学报:自然科学版 , 2013 , 53 ( 12 ): 1664 - 1669 .

LI Y , ZENG Z Y , ZHANG X F . Outsourced decryption scheme supporting attribute revocation [J ] . Journal of Tsinghua University (Science ＆ Technology) , 2013 , 53 ( 12 ): 1664 - 1669 .

PIRRETTI M , TRAYNOR P , MCDANIEL P , et al . Secure attribute-based systems [C ] // The 13th AMC conference on Computer and Communications Security . AMC , 2006 : 99 - 112 .

RAFAELI S , HUTCHISON D . A survey of key management for secure group communication [J ] . ACM Computing Surveys , 2003 , 35 ( 3 ): 309 - 329 .

IBRAIMI L , PETKOVIC M , NIKOVA S , et al . Mediated ciphertext-policy attribute-based encryption and its application [C ] // The 10th International Workshop on Information Security Applications . 2009 : 309 - 323 .

YU S , WANG C , REN K , et al . Attribute based data sharing with attribute revocation [C ] // The 5th ACM Symposium on Information,Computer and Communications Security . ACM , 2010 : 261 - 270 .

HUR J , NOH D K . Attribute-based access control with efficient revocation in data outsourcing systems [J ] . IEEE Transactions on Parallel and Distributed Systems , 2011 , 22 ( 7 ): 1214 - 1221 .

YANG K , JIA X , REN K . Attribute-based fine-grained access control with efficient revocation in cloud storage systems [C ] // The 8th ACM SIGSAC Symposium on Information,Computer and Communications Security . ACM , 2013 : 523 - 528 .

YANG K , JIA X . Security for cloud storage systems [M ] . Berlin : SpringerPress , 2014 .

马华 , 白翠翠 , 李宾 , 等 . 支持属性撤销和解密外包的属性基加密方案 [J ] . 西安电子科技大学学报 (自然科学版) , 2015 , 42 ( 6 ): 6 - 10 .

MA H , BAI C C , LI B , et al . Attribute-based encryption scheme supporting attribute revocation and decryption outsourcing [J ] . Journal of Xidian University (Science ＆ Technology) , 2015 , 42 ( 6 ): 6 - 10 .

SHIRAISHI Y , NOMURA K , MOHRI M , et al . Attribute revocable attribute-based encryption with forward secrecy for fine-grained access control of shared data [J ] . IEICE Transactions on Information and Systems , 2017 , 100 ( 10 ): 2432 - 2439 .

GREEN M , HOHENBERGER S , WATERS B . Outsourcing the decryption of ABE ciphertexts [C ] // The 20th USENIX Conference on Security . USENIX , 2011 :34.

LAI J , DENG R H , GUAN C , et al . Attribute-based encryption with verifiable outsourced decryption [J ] . IEEE Transactions on Information Forensics and Security , 2013 , 8 ( 8 ): 1343 - 1354 .

LI J , SHA F , ZHANG Y , et al . Verifiable outsourced decryption of attribute-based encryption with constant ciphertext length [J ] . Security and Communication Networks , 2017 , 2017 ( 2 ): 1 - 11 .

浏览量

882

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于区块链且支持数据共享的密文策略隐藏访问控制方案

支持安全外包计算的无线体域网数据共享方案

支持直接撤销的密文策略属性基加密方案

数据外包环境下一种支持撤销的属性基加密方案

云存储系统中支持用户隐私保护的细粒度访问控制