适用于移动用户高效访问外包数据的非对称代理重加密方案

doi:10.11772/j.issn.1001-9081.2016.08.2225

计算机应用 ›› 2016, Vol. 36 ›› Issue (8): 2225-2230.DOI: 10.11772/j.issn.1001-9081.2016.08.2225

适用于移动用户高效访问外包数据的非对称代理重加密方案

郝伟¹, 杨晓元^1,2, 王绪安¹, 张英男¹, 吴立强¹

1. 武警工程大学电子技术系, 西安 710086;
2. 网络与信息安全武警部队重点实验室, 西安 710086

收稿日期:2015-12-23 修回日期:2016-03-28 出版日期:2016-08-10 发布日期:2016-08-10
通讯作者: 郝伟
作者简介:郝伟(1990-),男,内蒙古包头人,硕士研究生,主要研究方向:基于身份的代理重加密;杨晓元(1959-),男,湖南湘潭人,教授,硕士,CCF会员,主要研究方向:密码学、信息安全;王绪安(1981-),男,湖北公安人,副教授,博士研究生,CCF会员,主要研究方向:密码学、信息安全;张英男(1990-),男,陕西西安人,博士研究生,CCF会员,主要研究方向:信息隐藏;吴立强(1986-),男,陕西蓝田人,讲师,硕士,CCF会员,主要研究方向:格密码学、可证明安全。网络出版时间2016-05-0314:19:32。
基金资助:
国家自然科学基金资助项目（61272492,61572521）；陕西省自然科学基金资助项目（2014JM8300）；武警工程大学基础研究项目（WJY201422,WJY201523）。

Asymmetric proxy re-encryption scheme of efficient access to outsourcing data for mobile users

HAO Wei¹, YANG Xiaoyuan^1,2, WANG Xu'an¹, ZHANG Yingnan¹, WU Liqiang¹

1. Department of Electronic Technology, Engineering University of Chinese People's Armed Police, Xi'an Shaanxi 710086, China;
2. Key Laboratory of Network and Information Security of Chinese People's Armed Police, Xi'an Shaanxi 710086, China

Received:2015-12-23 Revised:2016-03-28 Online:2016-08-10 Published:2016-08-10
Supported by:
This work is partially supported by the National Natural Science Foundation of China (61272492, 61572521), the Natural Science Foundation of Shaanxi Province (2014JM8300), the Basic Research Program of Engineering University of Chinese People's Armed Police (WJY201422, WJY201523).

摘要/Abstract

摘要： 为使移动设备更加方便快捷地解密存储于云端的外包数据，根据基于身份的广播加密（IBBE）系统和基于身份的加密（IBE）系统，使用Green等提出的解密外包的技术（GREEN M，HOHENBERGER S，WATERS B.Outsourcing the decryption of ABE ciphertexts.Proceedings of the 20th USENIX Conference on Security.Berkeley：USENIX Association，2011：34），提出一种改进的非对称跨加密系统的代理重加密（MACPRE）方案。该方案更适合计算能力有限的移动设备安全共享云端数据。移动用户在解密重加密后的数据时，运行一次指数运算和一次配对运算便可以将明文恢复，大大提高了移动用户解密的效率，降低了移动用户的能耗。该方案的安全性可以归约到底层的IBE方案和IBBE方案的安全性。理论分析和实验结果表明，该方案使得移动设备花费较少的时间便可以将存储在云端的数据解密，缓解了移动设备计算能力的不足，实用性较强。

关键词: 代理重加密, 基于身份的加密, 基于身份的广播加密, 解密外包, 数据共享

Abstract: In order to make the mobile device more convenient and faster decrypt the outsourcing data stored in the cloud, on the basis of Identity-Based Broadcast Encryption (IBBE) system and Identity-Based Encryption (IBE) system, using the technique of outsourcing the decryption proposed by Green et al. (GREEN M, HOHENBERGER S, WATERS B. Outsourcing the decryption of ABE ciphertexts. Proceedings of the 20th USENIX Conference on Security. Berkeley:USENIX Association, 2011:34), a Modified Asymmetric Cross-cryptosystem Proxy Re-Encryption (MACPRE) scheme across the encryption system was proposed. The proposed scheme is more suitable for mobile devices with limited computing power to securely share the data stored in the cloud. When the mobile user decrypts the re-encrypted data, the plaintext can be restored by performing one exponent operation and one bilinear pairing operation, which greatly improves the decryption efficiency of the mobile user and saves the power consumption of the mobile user. The security of this proposed scheme can be reduced to the security of the IBE and IBBE scheme. The theoretical analysis and experimental results show that, the proposed scheme can allow the mobile devices to decrypt data stored in the cloud by spending less time, and ease the problem of limited computing power of the mobile devices. The proposed scheme is more practical.

Key words: proxy re-encryption, Identity-Based Encryption (IBE), Identity-Based Broadcast Encryption (IBBE), decryption outsourcing, data sharing

中图分类号:

TP309

郝伟, 杨晓元, 王绪安, 张英男, 吴立强. 适用于移动用户高效访问外包数据的非对称代理重加密方案[J]. 计算机应用, 2016, 36(8): 2225-2230.

HAO Wei, YANG Xiaoyuan, WANG Xu'an, ZHANG Yingnan, WU Liqiang. Asymmetric proxy re-encryption scheme of efficient access to outsourcing data for mobile users[J]. Journal of Computer Applications, 2016, 36(8): 2225-2230.

参考文献

[1] CHU C K,CHOW S S M,TZENG W G,et al.Key-aggregate cryptosystem for scalable data sharing in cloud storage[J].IEEE Transactions on Parallel and Distributed Systems,2014,25(2):468-477.
[2] LEE B.Unified public key infrastructure supporting both certificate-based and ID-based cryptography[C]//ARES 2010:Proceedings of the 2010 International Conference on Availability,Reliability,and Security.Piscataway,NJ:IEEE,2010:54-61.
[3] DELERABLÉE C.Identity-based broadcast encryption with constant size ciphertexts and private keys[C]//Proceedings of the 200713th International Conference on the Theory and Application of Cryptology and Information Security,LNCS 4833.Berlin:Springer,2007:200-215.
[4] BONEH D,BOYEN X.Efficient selective-id secure identity-based encryption without random oracles[C]//Proceedings of the 2004 International Conference on the Theory and Applications of Cryptographic Techniques,LNCS 3027.Berlin:Springer,2004:223-238.
[5] DENG H,WU Q D,QIN B,et al.Tracing and revoking leaked credentials:accountability in leaking sensitive outsourced data[C]//Proceedings of the 20149th ACM Symposium on Information Computer and Communications Security.New York:ACM,2014:425-434.
[6] WANG L H,WANG L C,MAMBO M,et al.Identity-based proxy cryptosystems with revocability and hierachical confidentialities[C]//ICICS 2010:Proceedings of the 12th International Conference on Information and Communications Security,LNCS 6476.Berlin:Springer,2010:383-400.
[7] BLAZE M,BLEUMER G,STRAUSS M.Divertible protocols and atomic proxy cryptography[C]//Proceedings of the 1998 International Conference on the Theory and Application of Cryptographic Techniques,LNCS 1403.Berlin:Springer,1998:127-144.
[8] CHU C K,TZENG W G.Identity-based proxy re-encryption without random oracles[C]//ISC 2007:Proceedings of the 10th International Conference on Information Security,LNCS 4779.Berlin:Springer,2007:189-202.
[9] 崔宁,李艳琼.基于双线性对的无证书代理重加密方案[J].信息技术,2013(7):34-36.(CUI N,LI Y Q.A cerfiticateless proxy re-encryption scheme from pairings[J].Information Technology,2013(7):34-36.)
[10] SRINIVASAN A,RANGAN C P.Certificateless proxy re-encryption without pairing:revisited[C]//SCC 2015:Proceedings of the 3rd International Workshop on Security in Cloud Computing.New York:ACM,2015:41-52.
[11] LIANG K,LIU J K,WONG D S,et al.An efficient cloud-based revocable identity-based proxy re-encryption scheme for public clouds data sharing[C]//Proceedings of the 201419th European Symposium on Research in Computer Security,LNCS 8712.Berlin:Springer,2014:257-272.
[12] DENG H,WU Q H,QIN B,et al.Asymmetric cross-cryptosystem re-encryption applicable to efficient and secure mobile access to outsourced data[C]//Proceedings of the 10th ACM Symposium on Information,Computer and Communications Security.New York:ACM,2015:393-404.
[13] GREEN M,HOHENBERGER S,WATERS B.Outsourcing the decryption of ABE ciphertexts[C]//Proceedings of the 20th USENIX Conference on Security.Berkeley:USENIX Association,2011:34.
[14] MATSUO T.Proxy re-encryption systems for identity-based encryption[C]//Proceedings of the First International Conference on Pairing-Based Cryptography,LNCS 4575.Berlin:Springer,2007:247-267.
[15] LUO S,HU J B,CHEN Z.Ciphertext policy attribute-based proxy re-encryption[C]//Proceedings of the 12th International Conference on Information and Communications Security,LNCS 6476.Berlin:Springer,2010:401-415.
[16] SHAO J,LU R X,LIN X D.Fine-grained data sharing in cloud computing for mobile devices[C]//Proceedings of the 2015 IEEE Conference on Computer Communications.Piscataway,NJ:IEEE,2015:2677-2685.
[17] LYNN B.The Stanford pairing based cryptography library[EB/OL].[2015-11-20].http://crypto.stanford.edu/pbc.

适用于移动用户高效访问外包数据的非对称代理重加密方案

Asymmetric proxy re-encryption scheme of efficient access to outsourcing data for mobile users

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

[1]	葛丽娜, 胡雨谷, 张桂芬, 陈园园. 云计算环境基于客体属性匹配的逆向混合访问控制方案[J]. 计算机应用, 2021, 41(6): 1604-1610.
[2]	谷正川, 郭渊博, 方晨. 基于代理重加密的消息队列遥测传输协议端到端安全解决方案[J]. 计算机应用, 2021, 41(5): 1378-1385.
[3]	张利华, 王欣怡, 胡方舟, 黄阳, 白甲义. 基于双联盟链的智能电网数据共享模型[J]. 计算机应用, 2021, 41(4): 963-969.
[4]	李莉, 杨鸿飞, 董秀则. 基于身份多条件代理重加密的文件分级访问控制方案[J]. 《计算机应用》唯一官方网站, 2021, 41(11): 3251-3256.
[5]	罗文俊, 闻胜莲, 程雨. 基于区块链的电子医疗病历共享方案[J]. 计算机应用, 2020, 40(1): 157-161.
[6]	王海勇, 彭垚, 郭凯璇. 云存储中基于代理重加密的CP-ABE访问控制方案[J]. 计算机应用, 2019, 39(9): 2611-2616.
[7]	宋俊典, 戴炳荣, 蒋丽雯, 赵尧, 李超, 王晓强. 基于区块链的数据治理协同方法[J]. 计算机应用, 2018, 38(9): 2500-2506.
[8]	张恩, 金刚刚. 基于同态加密和Bloom过滤器的云外包多方隐私集合比较协议[J]. 计算机应用, 2018, 38(8): 2256-2260.
[9]	郝伟, 杨晓元, 王绪安, 吴立强. 条件型非对称跨加密系统的代理重加密方案[J]. 计算机应用, 2016, 36(9): 2452-2458.
[10]	戴晓明, 张薇, 郑志恒, 李镇林. 基于容错学习的GSW-型全同态层次型IBE方案[J]. 计算机应用, 2016, 36(7): 1856-1860.
[11]	徐海琳, 陈莺, 陆阳. 高效无双线性对的基于证书代理重加密方案[J]. 计算机应用, 2016, 36(5): 1250-1256.
[12]	苗立志焦东来杨立君. 面向地理标记语言空间数据的地理信息聚合[J]. 计算机应用, 2014, 34(6): 1816-1818.
[13]	郎讯魏立线王绪安吴旭光. 基于代理重加密的云存储密文访问控制方案[J]. 计算机应用, 2014, 34(3): 724-727.
[14]	金彪熊金波姚志强刘西蒙. 基于身份的受控文档透明加解密方案[J]. 计算机应用, 2013, 33(11): 3235-3238.
[15]	杜鹏白光伟沈航曹磊. 异构移动终端能量感知的P2P数据共享机制[J]. 计算机应用, 2013, 33(08): 2112-2116.