计算机应用 ›› 2016, Vol. 36 ›› Issue (10): 2733-2737.DOI: 10.11772/j.issn.1001-9081.2016.10.2733

• 网络空间安全 • 上一篇    下一篇

理想格上可撤销的模糊身份加密方案

项文, 杨晓元, 吴立强   

  1. 武警工程大学 网络与信息安全武警部队重点实验室, 西安 710086
  • 收稿日期:2016-03-28 修回日期:2016-06-17 出版日期:2016-10-10 发布日期:2016-10-10
  • 通讯作者: 项文,E-mail:xiangwen0917@163.com
  • 作者简介:项文(1990—),男,湖北襄阳人,硕士研究生,主要研究方向:格公钥密码学;杨晓元(1959—),男,湖南湘潭人,教授,博士生导师,CCF会员,主要研究方向:密码学、信息安全;吴立强(1986—),陕西蓝田人,讲师,硕士,CCF会员,主要研究方向:格公钥密码学、可证明安全理论。
  • 基金资助:
    国家自然科学基金资助项目(61272492,61572521);陕西省自然科学基础研究计划项目(2015JM6353)。

Revocable fuzzy identity based encryption scheme over ideal lattice

XIANG Wen, YANG Xiaoyuan, WU Liqiang   

  1. Key Laboratory for Network and Information Security of Chinese Armed Police Force, Engineering University of Chinese Armed Police Force, Xi'an Shaanxi 710086, China, Xi'an Shaanxi 710086, China
  • Received:2016-03-28 Revised:2016-06-17 Online:2016-10-10 Published:2016-10-10
  • Supported by:
    BackgroundThis work is partially supported by the National Natural Science Foundation of China (61272492,61572521), the Basic Research Project of Natural Science in Shaanxi Province (2015JM6353).

摘要: 针对目前基于身份加密(IBE)方案不能同时满足用户撤销和模糊身份提取功能,基于理想格上的差错学习问题(LWE),借助二叉树结构和门限秘密共享算法,提出了一个可撤销的模糊身份加密方案(RFIBE)。该方案首先利用理想格上的陷门生成函数和门限秘密共享算法生成用户的私钥,其次利用二叉树结构完成方案的撤销功能。最后,在标准模型下证明所提方案的安全性达到了选择身份和选择明文攻击下的不可区分性(IND-sID-CPA)安全。与基于标准格的IBE方案相比,所提方案同时具备可撤销功能和高效模糊身份提取功能,实用性更强。

关键词: 用户撤销, 模糊身份加密, 差错学习, 门限秘密共享算法

Abstract: The present Identity Based Encryption (IBE) scheme cannot meet user revocation and fuzzy identity extraction at the same time, a Revocable Fuzzy IBE (RFIBE) scheme based on hardness of Learning With Errors (LWE) problem over ideal lattice was proposed to resolve the above problems by using revocable binary trees and threshold secret sharing algorithm. Firstly, the trapdoor generating function over ideal lattice and threshold secret sharing algorithm were used to generate user' private key. Then an RFIBE scheme was put forward by using revocable binary trees. Finally, the scheme was proved to be INDistinguishabity against selective IDentity and Chosen Plaintext Attack (IND-sID-CPA) secure. Compared with previous IBE scheme, RFIBE has stronger practicability with the function of revocation and efficient fuzzy identity extraction.

Key words: user revocation, Fuzzy Identity Based Encryption (FIBE), Learning With Error (LWE), threshold secret sharing algorithm

中图分类号: