素数阶群上属性可重复的多授权机构基于属性的加密方案

doi:10.11772/j.issn.1001-9081.2015.08.2189

计算机应用 ›› 2015, Vol. 35 ›› Issue (8): 2189-2194.DOI: 10.11772/j.issn.1001-9081.2015.08.2189

素数阶群上属性可重复的多授权机构基于属性的加密方案

李作辉, 杨梦梦, 陈性元

信息工程大学, 郑州 450001

收稿日期:2015-03-09 修回日期:2015-05-09 出版日期:2015-08-10 发布日期:2015-08-14
通讯作者: 李作辉(1981-),男,湖南衡阳人,副研究员,博士研究生,主要研究方向:公钥密码、网络安全,forestspringer@163.com
作者简介:杨梦梦(1980-),女,安徽无为人,博士研究生,主要研究方向:公钥密码; 陈性元(1964-),男,安徽无为人,教授,博士,主要研究方向:网络安全。
基金资助:
国家973计划项目(2011CB311801)。

Attribute repeatable multi-authority attribute-based encryption scheme on prime order group

LI Zuohui, YANG Mengmeng, CHEN Xingyuan

Information Engineering University, Zhengzhou Henan 450001, china

Received:2015-03-09 Revised:2015-05-09 Online:2015-08-10 Published:2015-08-14

摘要/Abstract

摘要：

针对目前多授权机构基于属性的加密方案(MA-ABE)限制每个属性在访问结构中只能出现一次,而属性重复编码必将导致系统效率降低的问题,提出了一种素数阶群上属性可重复的多授权机构密文策略(MA-CP-ABE)方案。首先基于对偶配对空间和线性秘密共享等技术,在素数阶群上构建了一个MA-CP-ABE方案;然后通过引入q-Parallel BDHE假设,解决了经典对偶系统加密证明过程依赖一个统计意义假设,而该假设只有在访问结构中属性不重复出现才能成立的问题,构建一系列两两不可区分的攻击游戏证明该方案在标准模型下是自适应安全的;最后通过性能分析说明,与另两种素数阶群上构建的自适应安全MA-CP-ABE方案相比,在不考虑属性重复的情况下,该方案解密速度随着参与属性数量的增加分别提高了20%~40%和0%~50%,在真实应用环境中的性能优势更大。

关键词: 基于属性的加密, 多授权机构, 属性可重复, 素数阶, 标准模型

Abstract:

Since previous Multi-Authority Attribute-Based Encryption (MA-ABE) schemes limit each attribute to appear only once in the access structure, and suffer from superfluous computation overhead on repetitive encoding technique, an adaptively secure and unrestricted Multi-Authority Ciphertext-Policy ABE (MA-CP-ABE) scheme was proposed on prime order groups. Firstly, based on dual pairing vector space and linear secret-sharing schemes technology, an MA-CP-ABE scheme was constructed on prime order groups. Then, q-Parallel BDHE (Bilinear Diffie-Hellman Exponent) assumption was introduced to solve the problem that classical dual system encryption depends on a statistical hypothesis which requires each attribute to appear only once in the access structure, and a series of attacking games indistinguishable from each other was designed to prove that this scheme was adaptively secure in the standard model. Finally, performance analysis indicated that in comparison with another two adaptively secure MA-CP-ABE schemes on prime order groups, the speed of decryption was obviously improved by nearly 20%-40% and 0%-50% respectively as the number of participating attributes increasing, without considering the attribute repetition. This scheme is more efficient in real applications.

Key words: Attribute-Based Encryption (ABE), multi-authority, attribute repeatable, prime order, standard model

中图分类号:

TP309.7

李作辉, 杨梦梦, 陈性元. 素数阶群上属性可重复的多授权机构基于属性的加密方案[J]. 计算机应用, 2015, 35(8): 2189-2194.

LI Zuohui, YANG Mengmeng, CHEN Xingyuan. Attribute repeatable multi-authority attribute-based encryption scheme on prime order group[J]. Journal of Computer Applications, 2015, 35(8): 2189-2194.

参考文献

[1] SAHAI A, WATERS B. Fuzzy identity-based encryption [C]//EUROCRYPT 2005: Proceedings of the 24th Annual International Conference on the Theory and Applications of Cryptographic Techniques, LNCS 3494. Berlin: Springer, 2005: 457-473.
[2] GOYAL V, PANDEY O, SAHAI A, et al. Attribute-based encryption for fine-grained access control of encrypted data [C]//CCS'06: Proceedings of the 13th ACM Conference on Computer and Communications Security. New York: ACM, 2006: 89-98.
[3] BETHENCOURT J, SAHAI A, WATERS B. Ciphertext-policy attribute-based encryption [C]//SP 2007: Proceedings of the 2012 IEEE Symposium on Security and Privacy. Washington, DC: IEEE Computer Society, 2007:321-334.
[4] CHASE M. Multi-authority attribute based encryption [C]//TCC 2007: Proceedings of the 4th Theory of Cryptography Conference, LNCS 4392. Berlin: Springer, 2007: 515-534.
[5] CHASE M, CHOW S S M. Improving privacy and security in multi-authority attribute-based encryption [C]//CCS '09: Proceedings of the 16th ACM Conference on Computer and Communications Security. New York: ACM, 2009: 121-130.
[6] MVLLER S, KATZENBEISSER S, ECKERT C. Distributed attribute-based encryption [C]//ICISC 2008: Proceedings of the 11th International Conference on Information Security and Cryptology, LNCS 5461. Berlin: Springer, 2009: 20-36.
[7] MVLLER S, KATZENBEISSER S, ECKERT C. On multi-authority ciphertext-policy attribute-based encryption [J]. Bulletin of the Korean Mathematical Society, 2009, 46(4): 803-819.
[8] LEWKO A, WATERS B. Decentralizing attribute-based encryption [C]//EUROCRYPT 2011: Proceedings of the 30th Annual International Conference on the Theory and Applications of Cryptographic Techniques, LNCS 6632. Berlin: Springer, 2011: 568-588.
[9] WATERS B. Dual system encryption: realizing fully secure IBE and HIBE under simple assumptions [C]//CRYPTO 2009: Proceedings of the 29th Annual International Cryptology Conference, LNCS 5677. Berlin: Springer, 2009: 619-636.
[10] LEWKO A B. Functional encryption: new proof techniques and advancing capabilities [D]. Austin: The University of Texas, 2012: 64-121.
[11] LIU Z, CAO Z, HUANG Q, et al. Fully secure multi-authority ciphertext-policy attribute-based encryption without random oracles [C]//ESORICS 2011: Proceedings of the 16th European Symposium on Research in Computer Security, LNCS 6879. Berlin: Springer, 2011: 278-297.
[12] LI Q, MA J, XIONG J, et al. An adaptively secure multi-authority ciphertext-policy ABE scheme on prime order groups [J]. Acta Electronica Sinica, 2014, 42(4): 696-702. (李琦,马建峰,熊金波,等.一种素数阶群上构造的自适应安全的多授权机构CP-ABE方案[J].电子学报,2014,42(4):696-702.)
[13] WATERS B. Ciphertext-policy attribute-based encryption: an expressive, efficient, and provably secure realization [C]//PKC 2011: Proceedings of the 14th International Conference on Practice and Theory in Public Key Cryptography, LNCS 6751. Berlin: Springer, 2011: 53-70.
[14] LEWKO A. Tools for simulating features of composite order bilinear groups in the prime order setting [C]//EUROCRYPT 2012: Proceedings of the 31st Annual International Conference on Theory and Applications of Cryptographic Techniques. Berlin: Springer, 2012: 318-335.
[15] BONEH D, FRANKLIN M. Identity-based encryption from the Weil pairing [C]//Proceedings of the Advances in Cryptology — CRYPTO 2001, LNCS 2139. Berlin: Springer, 2001: 213-229.
[16] BEIMEL A. Secure schemes for secret sharing and key distribution [D]. Haifa: Israel Institute of Technology, 1996: 20-33.
[17] FENG D, CHEN C. Research on attribute-based cryptography [J]. Journal of Cryptologic Research, 2014, 1(1): 1-12. (冯登国,陈成.属性密码学研究[J].密码学报,2014,1(1):1-12.)
[18] HOHENBERGER S, WATERS B. Attribute-based encryption with fast decryption [C]//PKC 2013: Proceedings of the 16th International Conference on Practice and Theory in Public-Key Cryptography, LNCS 7778. Berlin: Springer, 2013: 162-179.

素数阶群上属性可重复的多授权机构基于属性的加密方案

Attribute repeatable multi-authority attribute-based encryption scheme on prime order group

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

[1]	王亚琼, 史国振, 谢绒娜, 李凤华, 王雅哲. 卫星网络中支持策略隐藏的多授权访问控制方案[J]. 计算机应用, 2019, 39(2): 470-475.
[2]	李镇林, 张薇, 白平, 王绪安. 基于属性的BGN型密文解密外包方案[J]. 计算机应用, 2017, 37(8): 2287-2291.
[3]	孙意如, 梁向前, 商玉芳. 理想格上基于身份的环签名方案[J]. 计算机应用, 2016, 36(7): 1861-1865.
[4]	李作辉, 陈性元. 素数阶群上快速解密的KP-ABE方案[J]. 计算机应用, 2016, 36(3): 637-641.
[5]	任小康, 陈培林, 曹源, 李亚楠, 杨小东. 基于身份的服务器辅助验证部分盲签名方案[J]. 计算机应用, 2016, 36(11): 3098-3102.
[6]	明洋, 原红平, 孙变, 乔正阳. 标准模型下高效的基于身份匿名广播加密方案[J]. 计算机应用, 2016, 36(10): 2762-2766.
[7]	李少鲲. 标准模型下可证安全的无证书全同态加密体制[J]. 计算机应用, 2015, 35(2): 387-392.
[8]	明洋张琳韩娟周俊. 标准模型下广义指定验证者签密[J]. 计算机应用, 2014, 34(2): 464-468.
[9]	罗文俊徐敏. 云环境下的基于属性和重加密的密钥管理[J]. 计算机应用, 2013, 33(10): 2832-2834.
[10]	孙华孟坤. 标准模型下可证安全的有效无证书签密方案[J]. 计算机应用, 2013, 33(07): 1846-1850.
[11]	杜卫东杨晓元张祥火王绪安. 适应性选择密文安全的可公开验证加密方案[J]. 计算机应用, 2013, 33(04): 1051-1054.
[12]	柳欣雷文庆. 无随机预言的完全匿名多服务订购系统[J]. 计算机应用, 2013, 33(02): 417-429.
[13]	李希合杨小东. 一种改进的双向盲代理重签名方案[J]. 计算机应用, 2013, 33(02): 447-449.
[14]	王泽成. 标准模型下可证明安全的新公钥加密方案[J]. 计算机应用, 2013, 33(02): 441-446.
[15]	石贤芝林昌露张胜元唐飞. 标准模型下高效的门限签名方案[J]. 计算机应用, 2013, 33(01): 15-18.