高效撤销的密文策略属性基加密方案

doi:10.3969/j.issn.1006-2475.2015.12.010

计算机与现代化 ›› 2015, Vol. 0 ›› Issue (12): 48-.doi: 10.3969/j.issn.1006-2475.2015.12.010

高效撤销的密文策略属性基加密方案

河海大学计算机与信息学院，江苏南京211100

收稿日期:2015-07-28 出版日期:2015-12-23 发布日期:2015-12-30
作者简介:姚伟（1991-），男，河北张家口人，河海大学计算机与信息学院硕士研究生，研究方向：密码学与信息安全；沙凤杰（1988-），男，硕士研究生，研究方向：密码学与信息安全；林啸楠（1991-），男，硕士研究生，研究方向：密码学与信息安全。

CPABE Scheme with Efficient Attribute Revocation

School of Computer and Information, Hohai University, Nanjing 211100, China

Received:2015-07-28 Online:2015-12-23 Published:2015-12-30

摘要/Abstract

摘要：
摘要：作为新型的密码学原语，属性基加密方案通过一系列属性来定义一个用户，并且实现了细粒度访问控制。然而，复杂、耗时的撤销操作成为限制属性基加密方案应用的瓶颈问题。为了解决属性基加密方案中的撤销问题，本文提出一种高效属性撤销的密文策略属性基加密方案。该方案通过固定长度的撤销列表记录撤销用户，撤销过程不必更新系统密钥及相关用户的密钥，大大降低了撤销所引起的计算开销。

关键词: 属性基, 访问控制, 撤销, 合谋攻击, 撤销列表

Abstract: As a new cryptographic primitive, attributebased encryption (ABE) scheme uses several attributes to identify a user and achieves finegrained access control. However, the complex issue of user revocation has become a bottlenect in ABE schemes. To solve the problem, the paper proposed a ciphertextpolicy attribute based encryption (CPABE) scheme with efficient user revocation. In this scheme, lists with content length are maintained to record the revoked users. Attribute revocation was excuted by the trusted authority without updating the keys of the system and the associated users, which reveals computation overhead in revocation.:

Key words: ABE, access control, revocation, collusion attack, revocation lists

中图分类号:

TP393

姚伟，沙凤杰，林啸楠. 高效撤销的密文策略属性基加密方案[J]. 计算机与现代化, 2015, 0(12): 48-.

YAO Wei, SHA Fengjie, LIN Xiaonan. CPABE Scheme with Efficient Attribute Revocation[J]. Computer and Modernization, 2015, 0(12): 48-.

参考文献

［1］
Sahai A, Waters B. Fuzzy identitybased encryption［C］// EUROCRYPT. 2005,3494:457-473.
［2］Bethencourt J, Sahai A, Waters B. CiphertextPolicy attributebased encryption［C］// Proc. IEEE Symposium on Security and Privacy. 2007:321-334.
［3］Goyal V, Pandey O, Sahai A, et al. Attributebased encryption for finegrained access control of encrypted data［C］// Proc. 13th ACM Conference on Computer and Communications Security. 2006:89-98.
〖LL〗［4］Yu Shucheng, Wang Cong, Ren Kui, et al. Attribute based data sharing with attribute revocation［C］// Proc. 5th ACM Symposium on Information, Computer and Communications Security. 2010:261-270.
［5］Tysowski P K, Hasan M A. Hybrid attributebased encryption and reencryption for scalable mobile applications in clouds［J］. IEEE Transactions on Cloud Computing, 2013,1(2):172-186.
［6］Hur J, Noh D K. Attributebased access control with efficient revocation in data outsourcing systems［J］. IEEE Transactions on Parallel and Distributed Systems, 2011,22(7):1214-1221.
［7］Hur J. Improving securityand efficiency in attribute based data sharing［J］. IEEE Transactions on Knowledge and Data Engineering, 2013,25(10):22712282.
［8］苏金树,曹丹,王小峰,等,属性基加密机制［J］. 软件学报, 2011,22(6):1299-1315.
［9］Yang Kan, Jia Xiaohua, Ren Kui. Attributebased finegrained access control with efficient revocation in cloud storage systems［C］// ASIA CCS ’13. 2013:523-528.
［10］王鹏翩,冯登国,张立武. 一种支持完全细粒度属性基撤销的CPABE方案［J］. 软件学报, 2012,23(10):2805-2816.
［11］Xie Xingxing, Ma Hua, Li Jin, et al. New ciphertextpolicy attributebased access control with efficient revocation［C］// ICTEur Asia. 2013,7804:373-382.
［12］Boldyreva A, Goyal V, Kumar V. Identitybased encryption with efficient revocation［C］// ACM CCS. 2008:417426.
［13］Yang Ming, Liu Fan, Han Jingli, et al. An efficient attribute based encryption scheme with revocation for outsourced data sharing control［C］// International Conference on Instrumentation, Measurement, Computer, Communication and Control. 2011:516-520.
［14］Chen Jianwei, Ma Huadong. Efficient decentralized attributebased access control for cloud storage with user revocation［C］// IEEE ICC. 2014:3782-3787.
［15］Green M, Hohenberger S, Waters B. Outsourcing the decryption of ABE ciphertexts［C］// Proceedings of the USENIX Security Symposium. 2011.
［16］Li Jin, Chen Xiaofeng, Li Jingwei, et al. Finegrained access control system based on outsourced attributebased encryption［C］// ESORICS. 2013,8134:592-609.
［17］Li Jingwei, Jia Chunfu, Li Jin. et al. Outsourcing encryption of attributebased encryption with map reduce［C］// ICICS. 2012,7618:191-201.
［18］Chase M. Multiauthority attribute based encryption［C］// TCC. 2007,4392:515-534.

[1]	朱克1, 玄佳兴2, 薛文昊2. 一种基于聚合与关联智能合约的电子证照访问控制方法[J]. 计算机与现代化, 2024, 0(06): 103-108.
[2]	古丽博斯坦·阿克木, 努尔买买提·黑力力. 支持动态策略变化的ABAC决策回收[J]. 计算机与现代化, 2022, 0(10): 47-54.
[3]	刘铮, 吴柯桦, 叶春晓. 增强安全的云存储数据访问控制方案[J]. 计算机与现代化, 2021, 0(10): 119-126.
[4]	李文全, 徐素萍. 基于地理信息的旅游资源信息库系统[J]. 计算机与现代化, 2021, 0(08): 100-103.
[5]	刘雪贞, 崔艳, 邓小飞, 彭杰. 支持权限管理的高效属性撤销机制[J]. 计算机与现代化, 2021, 0(07): 95-101.
[6]	赵微, 秦砺寒, 运晨超. 基于Portal认证技术的科技成果数据跨平台访问控制[J]. 计算机与现代化, 2021, 0(07): 102-106.
[7]	孙广成, 李洪赭, 李赛飞, 张晓薇. 基于区块链的物联网访问控制系统[J]. 计算机与现代化, 2020, 0(11): 100-108.
[8]	周李京,王敏,秦璐璐. 多属性授权机构下属性可撤销的CP-ABE方案[J]. 计算机与现代化, 2019, 0(11): 60-.
[9]	缪思薇1，余文豪1，姚峰2，高婧3. 针对PLC访问控制的安全分析[J]. 计算机与现代化, 2019, 0(09): 41-.
[10]	杨阳，曹彦. 基于危机事件的自适应访问控制模型[J]. 计算机与现代化, 2019, 0(08): 98-.
[11]	张芃,周良. 基于信任的动态多级访问控制模型[J]. 计算机与现代化, 2019, 0(07): 116-.
[12]	张兴兰,李建楠. 支持高效撤销的属性加密方案[J]. 计算机与现代化, 2018, 0(07): 114-.
[13]	陈成，努尔买买提·黑力力. 基于CP-ABE的隐藏属性外包解密访问控制[J]. 计算机与现代化, 2018, 0(05): 74-.
[14]	刘赛1,聂庆节1,刘军1,李东民2,李静2. 基于量化行为的实时数据库备份系统访问控制模型[J]. 计算机与现代化, 2018, 0(01): 116-122.
[15]	史庭俊,张颖杰. #br# 云存储中基于属性的密文策略访问控制方法[J]. 计算机与现代化, 2017, 0(7): 111-116.

高效撤销的密文策略属性基加密方案

CPABE Scheme with Efficient Attribute Revocation

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

本文评价