计算机与现代化

• 信息安全 • 上一篇    下一篇

一种支持属性撤销的ABE高效数据共享方案

  

  1. 河海大学计算机与信息学院,江苏南京211100
  • 收稿日期:2015-09-07 出版日期:2016-03-02 发布日期:2016-03-03
  • 作者简介:韦明伦(1990-),男(壮族),广西桂林人,河海大学计算机与信息学院硕士研究生,研究方向:信息安全; 吕鑫(1983-),〖JP2〗男,江苏南京人,博士后,CCF会员,研究方向:密码学,网络信息安全; 徐淑芳(1981-), 女,安徽青阳人,讲师,博士研究生,研究方向:通信工程; 王龙宝(1977-),男,江苏盐城人,讲师,博士研究生,CCF会员,研究方向:机器学习,数据挖掘。
  • 基金资助:
     国家自然科学基金面上项目(61272543); 国家科技支撑计划(2013BAB06B04); 中国华能集团公司总部科技项目(HNKJ13-H17-04); 江苏省自然科学基金资助项目(BK20130852); 江苏省博士后科研资助计划(1401001C)

 An Efficient Attribute Based Encryption Data Sharing Scheme of #br#  Supporting Attribute Revocation

  1. College of Computer and Information, Hohai University, Nanjing 211100, China
  • Received:2015-09-07 Online:2016-03-02 Published:2016-03-03

摘要:  随着云计算的流行,越来越多的敏感数据存储在云端并通过Internet实现数据共享,与此同时也带来了很多安全问题。针对这一问题,提出一种基于CP-ABE的高效数据共享方案。该方案是一种非常适用于外包数据的细粒度访问控制加密方案,可用于解决云存储中的一些安全问题。采用只有与门的访问结构,以属性作为公钥,能够表示属性在与门中正、非和无关紧要3种情况,将密文与用户私钥属性相关联,支持代理重加密技术,能够灵活表示访问控制策略的同时减轻授权机构的负担,并能够实现用户属性的即时撤销和高效解密。

关键词:  , 基于属性的加密; 访问控制; 密钥撤销

Abstract: With the popular of cloud computing, more and more sensitive data are stored on cloud and it can easily be shared over the Internet. At the same time, the problems of security come. To counter this problem, this paper proposes an effectual way for data shared based on CP-ABE. This encryption scheme is very applicable to fine-grained access controls of outsourced database, and can be used to solve some safety problems of cloud usage. In this paper, we use the access structure with only AND gates and make attributes as public key. Every attribute can express three different situations, including positive, negative, and irrelevant, in AND gate. In particular, It associates ciphertext with user‘s private key properties, supporting proxy re-encryption. Based on the above, this proposed scheme can also have high flexibility in representing access control policy and reduce the burden of authorized agency. In addition, it implemented instant revoking of user properties and efficient decryption.

Key words: Attribute-based Encryption (ABE), access control, key revocation