基于CP-ABE的隐藏属性外包解密访问控制

doi:10.3969/j.issn.1006-2475.2018.05.016

计算机与现代化

基于CP-ABE的隐藏属性外包解密访问控制

（新疆大学数学与系统科学学院，新疆乌鲁木齐830046）

收稿日期:2017-10-17 出版日期:2018-06-13 发布日期:2018-06-13
作者简介: 陈成（1992-）,男,湖北咸宁人,新疆大学数学与系统科学学院硕士研究生,研究方向：访问控制; 努尔买买提·黑力力（1976-）,男（维吾尔族）,新疆库车人,副教授,博士,研究方向:网络信息安全,访问控制。
基金资助:
国家自然科学基金资助项目(61562085,11261057,11461069); 新疆维吾尔自治区人力资源和社会保障厅留学人员科技活动资助项目

Hidden Attribute Outsourced Decryption Access Control Scheme Based on CP-ABE

(College of Mathematics and System Science, Xinjiang University, Urumqi 830046, China)

Received:2017-10-17 Online:2018-06-13 Published:2018-06-13

摘要/Abstract

摘要： 传统的属性基加密方案中数据拥有者将访问结构和密文保存在一起，于是用户收到密文消息的同时也收到了访问结构，但访问结构本身就可能包含数据拥有者的隐私信息。本文提出一种基于密文策略属性基加密(Ciphertext-Policy Attribute-Based Encryption, CP-ABE)的隐藏属性外包解密访问控制方案。该方案既能隐藏数据拥有者制定的访问控制策略中的属性，同时将计算密集型解密操作交给代理服务器完成，又能保证未经授权的属性授权中心或代理服务器不能独自解密共享的加密数据。

关键词: 隐藏属性, 外包解密, 密文策略属性基加密, 访问控制

Abstract: In conventional attribute-based encryption schemes, the data owner embeds the access structure to the ciphertext, thus the user receives the ciphertext with the access structure, however the access structure itself might contain private information of the data owner. This paper proposes a hidden attribute outsourced decryption access control scheme based on CP-ABE (Ciphertext-Policy Attribute-Based Encryption). The scheme can not only hide the attributes of the access control policy specified by the data owner, but also deliver the computation intensive decryption operations to the proxy server and guarantee that the unauthorized attribute authorization center or the proxy server can not decrypt the shared encrypted data alone.

Key words: hidden attribute, outsourced decryption, ciphertext-policy attribute-based encryption, access control

中图分类号:

TP309.7

陈成，努尔买买提·黑力力. 基于CP-ABE的隐藏属性外包解密访问控制[J]. 计算机与现代化, doi: 10.3969/j.issn.1006-2475.2018.05.016.

CHEN Cheng, Nurmamat HELIL. Hidden Attribute Outsourced Decryption Access Control Scheme Based on CP-ABE[J]. Computer and Modernization, doi: 10.3969/j.issn.1006-2475.2018.05.016.

参考文献

［1］   Sahai A, Waters B. Fuzzy identity-based encryption［C］// International Conference on Theory and Applications of Cryptographic Techniques. 2005:457-473.
［2］ Goyal V, Pandey O, Sahai A, et al. Attribute-based encryption for fine-grained access control of encrypted data［C］// ACM Conference on Computer and Communications Security. 2006:89-98.
［3］ Ostrovsky R, Sahai A, Waters B. Attribute-based encryption with non-monotonic access structures［C］// ACM Conference on Computer & Communications Security. 2007:195-203.
［4］ Attrapadung N, Imai H. Conjunctive broadcast and attribute-based encryption［C］// Proceedings of 2009 3rd International Conference on Pairing-Based Cryptography. 2009:248-265.
［5］    Attrapadung N, Imai H. Attribute-based encryption supporting direct/indirect revocation modes［C］// International Conference on Cryptography and Coding. 2009:278-300. 〖LL〗〖HJ1.65mm〗
［6］ Bethencourt J, Sahai A, Waters B. Ciphertext-policy attribute-based encryption［C］// IEEE Symposium on Security and Privacy. 2007:321-334.
［7］    Waters B. Ciphertext-policy attribute-based encryption: An expressive, efficient, and provably secure realization［C］// International Workshop on Public Key Cryptography.   2011:53-70.
［8］ Nishide T, Yoneyama K, Ohta K. Attribute-based encryption with partially hidden encryptor-specified access structures［C］// International Conference on Applied Cryptography and Network Security. 2008:111-129.
［9］ Yu Shucheng, Ren Kui, Lou Wenjing. Attribute-based content distribution with hidden policy［C］// IEEE Workshop on Secure Network Protocols. 2008:39-44.
［10］ Lai Junzuo, Deng R H, Li Yingjiu. Fully secure cipertext-policy hiding CP-ABE［C］// International Conference on Information Security Practice and Experience. 2011:24-39. 
［11］Lai Junzuo, Deng R H, Li Yingjiu. Expressive CP-ABE with partially hidden access structures［C］// ACM Symposium on Information, Computer and Communications Security. 2012:18-19.
［12］Hur J. Attribute-based secure data sharing with hidden policies in smart grid［J］. IEEE Transactions on Parallel & Distributed Systems, 2013,24(11):2171-2180.
［13］Zhang Yinghui, Chen Xiaofeng, Li Jin, et al. Anonymous attribute-based encryption supporting efficient decryption test［C］// ACM Symposium on Information, Computer and Communications Security. 2013:511-516.
［14］宋衍,韩臻,刘凤梅,等. 基于访问树的策略隐藏属性加密方案［J］. 通信学报, 2015,36(9):119-126.
［15］ 应作斌,马建峰,崔江涛. 支持动态策略更新的半策略隐藏属性加密方案［J］. 通信学报, 2015,36(12):178-189. 
［16］雷蕾,蔡权伟,荆继武,等. 支持策略隐藏的加密云存储访问控制机制［J］. 软件学报, 2016,27(6):1432-1450.
［17］张赛,杨庚,韩亚梅,等. 支持属性撤销的策略隐藏与层次化访问控制［J］. 计算机工程与应用, 2017,53(4):51-58.
［18］杜瑞颖,沈剑,陈晶,等. 基于策略隐藏属性加密的云访问控制方案［J］. 武汉大学学报(理学版), 2016,62(3):242-248.

[1]	古丽博斯坦·阿克木, 努尔买买提·黑力力. 支持动态策略变化的ABAC决策回收[J]. 计算机与现代化, 2022, 0(10): 47-54.
[2]	刘铮, 吴柯桦, 叶春晓. 增强安全的云存储数据访问控制方案[J]. 计算机与现代化, 2021, 0(10): 119-126.
[3]	李文全, 徐素萍. 基于地理信息的旅游资源信息库系统[J]. 计算机与现代化, 2021, 0(08): 100-103.
[4]	刘雪贞, 崔艳, 邓小飞, 彭杰. 支持权限管理的高效属性撤销机制[J]. 计算机与现代化, 2021, 0(07): 95-101.
[5]	赵微, 秦砺寒, 运晨超. 基于Portal认证技术的科技成果数据跨平台访问控制[J]. 计算机与现代化, 2021, 0(07): 102-106.
[6]	孙广成, 李洪赭, 李赛飞, 张晓薇. 基于区块链的物联网访问控制系统[J]. 计算机与现代化, 2020, 0(11): 100-108.
[7]	缪思薇1，余文豪1，姚峰2，高婧3. 针对PLC访问控制的安全分析[J]. 计算机与现代化, 2019, 0(09): 41-.
[8]	杨阳，曹彦. 基于危机事件的自适应访问控制模型[J]. 计算机与现代化, 2019, 0(08): 98-.
[9]	张芃,周良. 基于信任的动态多级访问控制模型[J]. 计算机与现代化, 2019, 0(07): 116-.
[10]	张兴兰,李建楠. 支持高效撤销的属性加密方案[J]. 计算机与现代化, 2018, 0(07): 114-.
[11]	刘赛1,聂庆节1,刘军1,李东民2,李静2. 基于量化行为的实时数据库备份系统访问控制模型[J]. 计算机与现代化, 2018, 0(01): 116-122.
[12]	史庭俊,张颖杰. #br# 云存储中基于属性的密文策略访问控制方法[J]. 计算机与现代化, 2017, 0(7): 111-116.
[13]	王瑶,李非非,王刚. 高效完全可验证外包解密属性基加密方案[J]. 计算机与现代化, 2017, 0(4): 114-117.
[14]	韦明伦，吕鑫，徐淑芳，王龙宝，李水艳，平萍，马鸿旭，刘璇. 一种支持属性撤销的ABE高效数据共享方案[J]. 计算机与现代化, 2016, 0(2): 66-71.
[15]	季开伟,乐红兵. 规则引擎在访问控制中的研究与应用[J]. 计算机与现代化, 2015, 0(8): 75-79.

基于CP-ABE的隐藏属性外包解密访问控制

Hidden Attribute Outsourced Decryption Access Control Scheme Based on CP-ABE

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

本文评价