《计算机应用》唯一官方网站 ›› 2024, Vol. 44 ›› Issue (2): 485-489.DOI: 10.11772/j.issn.1001-9081.2023020173

• 网络空间安全 • 上一篇    

用于实现区块链隐私保护的属性基加密方案

马海峰1(), 李玉霞1, 薛庆水1, 杨家海2, 高永福1   

  1. 1.上海应用技术大学 计算机科学与信息工程学院,上海 201418
    2.清华大学 网络科学与网络空间研究院,北京 100084
  • 收稿日期:2023-02-23 修回日期:2023-03-30 接受日期:2023-04-03 发布日期:2024-02-22 出版日期:2024-02-10
  • 通讯作者: 马海峰
  • 作者简介:李玉霞(1996—),女,河南漯河人,硕士研究生,主要研究方向:区块链、隐私保护
    薛庆水(1971—),男,山东济南人,教授,博士,CCF会员,主要研究方向:网络空间安全
    杨家海(1966—),男,浙江丽水人,教授,博士生导师,博士,主要研究方向:互联网络管理、网络测量与安全
    高永福(1998—),男,内蒙古通辽人,硕士研究生,主要研究方向:区块链、隐私保护。
  • 基金资助:
    国家电网项目(SGHAXTOOWWJS2200033)

Attribute-based encryption scheme for blockchain privacy protection

Haifeng MA1(), Yuxia LI1, Qingshui XUE1, Jiahai YANG2, Yongfu GAO1   

  1. 1.School of Computer Science & Information Engineering,Shanghai Institute of Technology,Shanghai 201418,China
    2.Institute of Network Science and Cyberspace,Tsinghua University,Beijing 100084,China
  • Received:2023-02-23 Revised:2023-03-30 Accepted:2023-04-03 Online:2024-02-22 Published:2024-02-10
  • Contact: Haifeng MA
  • About author:LI Yuxia, born in 1996, M. S. candidate. Her research interests include blockchain, privacy protection.
    XUE Qingshui, born in 1971, Ph. D., professor. His research interests include cyberspace security.
    YANG Jiahai, born in 1966, Ph. D., professor. His research interests include Internet management, network measurement and security.
    GAO Yongfu, born in 1998, M. S. candidate. His research interests include blockchain, privacy protection.
  • Supported by:
    State Grid Project(SGHAXTOOWWJS2200033)

摘要:

要解决区块链账本公开带来的安全问题,关键在于隐藏私密信息。提出一种使用多属性机构的属性基加密实现区块链数据的隐私保护方案。相比单一属性机构,多属性机构在实现权力分散的同时避免了任何单点故障。首先,修改密钥组件生成算法,每个属性机构把用户身份作为参数生成私钥组件,防止节点合谋访问无权访问的数据;然后,修改基于身份的签名技术建立用户身份与钱包地址之间的链接,使区块链变得可监管的同时还能追溯非法用户;最后,基于决策双线性Diffie-Hellman(DBDH)假设,在随机预言模型中证明了所提方案的安全性。实验结果表明,与基于椭圆曲线上的环签名的区块链隐私保护方案和支持关键字遗忘搜索的区块链隐私保护方案相比,在生成相同区块个数的情况下,所提方案用时最少,更具可行性。

关键词: 区块链, 隐私保护, 可监管, 属性基加密, 链上数据

Abstract:

To solve the security problems caused by the disclosure of blockchain ledgers, the key lies in the hiding of private information. An attribute-based encryption scheme with multiple authorities was proposed for privacy protection of blockchain data. Compared to single authority, multiple authorities are decentralized and avoid any single point of failure. First, the key component generation algorithm was modified, where each authority used the user identity as a parameter to generate private key components, preventing collusion between nodes to access unauthorized data. Then, identity-based signature technology was modified to establish a connection between user identities and wallet addresses, making the blockchain policeable and the illegal users traceable. Finally, based on the DBDH (Decisional Bilinear Diffie-Hellman) hypothesis, the safety of the proposed scheme was proved in random oracle model. The experimental results show that, compared with the blockchain privacy protection scheme based on the ring signature based on the elliptic curve and the blockchain privacy protection scheme supporting keyword forgetting search, the proposed scheme takes the least amount of time and is more feasible, when generating the same number of blocks.

Key words: blockchain, privacy protection, policeable, attribute-based encryption, on-chain data

中图分类号: