Key storage management scheme based on keyed hash tree with state

Xiangyu WANG; Jianfeng MA; Yinbin MIAO; Kai ZHANG; Qiying WU

doi:10.11959/j.issn.1000-436x.2018080

您当前的位置：

首页 >

文章列表页 >

Key storage management scheme based on keyed hash tree with state

Papers | 更新时间：2024-06-05

- Key storage management scheme based on keyed hash tree with state
- Journal on Communications Vol. 39, Issue 5, Pages: 94-102(2018)
- 作者机构：
  
  西安电子科技大学网络与信息安全学院，陕西西安 710071
- 作者简介：
- 基金信息：
  
  The National High Technology Research and Development Program (863 Program)(2015AA016007);The National Natural Science Foundation of China(61702404);The Central University Basic Business Expenses Special Funding for Scientific Research Projects(JB171504);China Postdoctoral Science Foundation Projects(2017M613080)
- DOI：10.11959/j.issn.1000-436x.2018080
  CLC： TN918.4
- Online First：2018-05，
  
  Published：25 May 2018
- 稿件说明：
移动端阅览
Xiangyu WANG, Jianfeng MA, Yinbin MIAO, et al. Key storage management scheme based on keyed hash tree with state[J]. Journal on Communications, 2018, 39(5): 94-102.
DOI：

Xiangyu WANG, Jianfeng MA, Yinbin MIAO, et al. Key storage management scheme based on keyed hash tree with state[J]. Journal on Communications, 2018, 39(5): 94-102. DOI： 10.11959/j.issn.1000-436x.2018080.

摘要

针对密文检索系统中多源数据加密带来的海量密钥存储管理问题，提出了以密钥状态散列树作为密钥派生结构的密钥存储管理方案。该方案借助根密钥及密钥派生树进行密钥计算，且只需要存储根密钥和树结构，大大降低了密钥存储开销；另外，该方案可以根据撤销状态值进行密钥撤销管理，解决了派生树密钥撤销及结构更新难题。安全分析表明，部分数据密钥的泄露并不会泄露其他数据机密性，且基于实际数据集的性能分析表明所提密钥管理方案在实际应用中是可行的。

Abstract

To solve the problem of massive keys storage caused by multi-source data encryption in ciphertext retrieval system

a key storage scheme based on keyed hash tree with state was proposed.The scheme computes encryption key according to the root key and key derivation tree

and just needs to store the root key and the tree structure

which greatly reduces the key storage costs.In addition

the scheme manages key revocation according to the revocation state value

thereby solving the problem of key revocation and structure update.Strict security analysis shows that the partial data key disclosure does not leak the data confidentiality of remaining data

and the performance analysis using real-world dataset shows that the proposed key storage management scheme is acceptable in ciphertext retrieval system.

关键词

Keywords

references

曾文英 , 赵跃龙 , 尚敏 . 云计算及云存储生态系统研究 [J ] . 计算机研究与发展 , 2011 , 48 ( S1 ): 234 - 239 .

ZENG W Y , ZHAO Y L , SHANG M . Research on cloud computing and cloud storage ecosystem [J ] . Journal of Computer Research and Development , 2011 , 48 ( S1 ): 234 - 239 .

ABDALLA M , BELLARE M , CATALANO D , et al . Searchable encryption revisited:consistency properties,relation to anonymous ibe,and extensions [J ] . Journal of Cryptology , 2008 , 21 ( 3 ): 350 - 391 .

CURTMOLA R , GARAY J , KAMARA S , et al . Searchable symmetric encryption:improved definitions and efficient constructions [C ] // ACM Conference on Computer and Communications Security (CCS) . 2006 : 79 - 88 .

CUI Z , ZHU H , CHI L . Lightweight key management on sensitive data in the cloud [J ] . Security ＆ Communication Networks , 2013 , 6 ( 10 ): 1290 - 1299 .

ATALLAH M J , BLANTON M , FAZio N , et al . Dynamic and efficient key management for access hierarchies [J ] . ACM Transactions on Information and System Security (TISSEC) , 2009 , 12 ( 3 ): 1 - 43 .

BLUNDO C , CIMATO S , VIMERCATI S D C D , et al . Efficient key management for enforcing access control in outsourced scenarios [C ] // Emerging Challenges for Security . 2009 : 364 - 375 .

CUI Z , ZHU H , SHI J , et al . Lightweight management of authorization update on cloud data [C ] // International Conference on Parallel and Distributed Systems (ICPADS) . 2014 : 456 - 461 .

BESSANI A , CORREIA M , QUARESMA B , et al . DepSky:dependable and secure storage in a cloud-of-clouds [J ] . ACM Transactions on Storage , 2011 , 9 ( 4 ): 31 - 46 .

马华 , 白翠翠 , 李宾 , 等 . 支持属性撤销和解密外包的属性基加密方案 [J ] . 西安电子科技大学学报自然科学版 , 2015 , 42 ( 6 ): 6 - 10 .

MA H , BAI C C , LI B , et al . Attribute-based encryption scheme supporting attribute revocation and decryption outsourcing [J ] . Journal of Xidian University (Natural Science) , 2015 , 42 ( 6 ): 6 - 10 .

付东来 , 彭新光 , 杨玉丽 . 基于可信平台模块的外包数据安全访问方案 [J ] . 电子与信息学报 , 2013 , 35 ( 7 ): 1766 - 1773 .

FU D L , PENG X G , YANG Y L . Trusted platform module-based scheme for secure access to outsourced data [J ] . Journal of Electronics＆ Information Technology , 2013 , 35 ( 7 ): 1766 - 1773 .

田丰 , 桂小林 , 张学军 , 等 . 基于兴趣点分布的外包空间数据隐私保护方法 [J ] . 计算机学报 , 2014 , 37 ( 1 ): 123 - 138 .

TIAN F , GUI X L , ZHANG X J , et al . Privacy-preserving approach for outsourced spatial data based on POI distribution [J ] . Chinese Journal of Computers , 2014 , 37 ( 1 ): 123 - 138 .

周林 , 矫文成 , 吴杨 , 等 . 一种基于层簇式的卫星网络组密钥管理方案 [J ] . 宇航学报 , 2013 , 34 ( 4 ): 559 - 567 .

ZHOU L , JIAO W C , WU Y , et al . A group key agreement protocol based on layer-cluster for satellite network [J ] . Journal of Astronautics , 2013 , 34 ( 4 ): 559 - 567 .

WONG C K , GOUDA M , LAM S S . Secure group communications using key graphs [J ] . IEEE/ACM Transactions on Networking , 2000 , 8 ( 1 ): 16 - 30 .

祝烈煌 , 曹元大 , 廖乐健 . 基于状态密钥树的安全群组密钥分发协议 [J ] . 北京理工大学学报 , 2006 , 26 ( 9 ): 805 - 808 .

ZHU L H , CAO Y D , LIAO L J . Secure group key distribution protocol based on the status key tree [J ] . Transactions of Beijing institute of Technology , 2006 , 26 ( 9 ): 805 - 808 .

LI Y , DHOTRE N S , OHARA Y , et al . Horus:fine-grained encryption-based security for large-scale storage [C ] // Usenix Conference on File and Storage Technologies (FAST) . 2013 : 147 - 160 .

KALLAHALLA M , RIEDEL E , SWAMINATHAN R , et al . Plutus:scalable secure file sharing on untrusted storage [C ] // Usenix Conference on File and Storage Technologies . 2003 : 29 - 42 .

MARTIN L . XTS:a mode of AES for encrypting hard disks [J ] . IEEE Security ＆ Privacy , 2010 , 8 ( 3 ): 68 - 69 .

Views

2025

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Method of ciphertext retrieval in mobile edge computing based on block segmentation

Attribute-based authenticated key agreement protocol supporting revocation

Related Author

Na WANG

Kun ZHENG

Junsong FU

Jian LI

Qiang LI

Deng-guo FENG

Li-wu ZHANG

Related Institution

School of Computer, Beijing University of Posts and Telecommunications

School of Cyberspace Security,Beijing University of Posts and Telecommunications

Institute of Software, Chinese Academy of Sciences,, China

AI问答

⁰