基于匿名广播加密的云存储访问控制方法

doi:10.11772/j.issn.1001-9081.2017.02.0473

计算机应用 ›› 2017, Vol. 37 ›› Issue (2): 473-482.DOI: 10.11772/j.issn.1001-9081.2017.02.0473

基于匿名广播加密的云存储访问控制方法

许盛伟, 林慕清

北京电子科技学院信息安全研究所, 北京 100070

收稿日期:2016-08-29 修回日期:2016-09-30 出版日期:2017-02-10 发布日期:2017-02-11
通讯作者: 林慕清,linmq@besti.edu.cn
作者简介:许盛伟(1976-),男,江西吉安人,副研究员,博士,主要研究方向:信息安全、密码应用;林慕清(1987-),男,安徽宿州人,助理研究员,博士,主要研究方向:密码学、网络安全。
基金资助:
中共中央办公厅信息安全重点实验室开放基金资助项目（基本科研业务费2014KF_XSW）；北京电子科技学院博士启动项目（2016博士启动-林慕清）。

Anonymous broadcast encryption based access control method for cloud storage

XU Shengwei, LIN Muqing

Information Security Institute, Beijing Electronic Science and Technology Institute, Beijing 100070, China

Received:2016-08-29 Revised:2016-09-30 Online:2017-02-10 Published:2017-02-11
Supported by:
This work is partially supported by the Open-fund Project of the Key Laboratory of Information Security (JBKYYWF2014KF_XSW), the Doctorial Initializing Project of Beijing Electronic Science and Technology Institute (2016BSQD-LMQ).

摘要/Abstract

摘要： 针对现有的匿名广播加密方法在加解密性能和安全性方面的不足，提出一种基于拉格朗日插值多项式的匿名广播加密方法。首先定义了可以抵御自适应敌手攻击的匿名广播加密安全模型；然后在合数阶双线性群环境下采用拉格朗日插值多项式对方案进行了构建，在保证用户身份匿名性的同时，实现了高效的加解密；最后基于子群判定假设和合数阶判定双线性Diffie-Hellman假设，在标准模型下证明了方法针对自适应敌手具有密文的机密性和接收者匿名性。实验与性能分析表明，方法具有较低的通信和计算开销，可以有效地解决云存储中密文数据的匿名访问控制问题。

关键词: 云存储, 访问控制, 匿名广播加密, 拉格朗日插值多项式, 合数阶双线性群

Abstract: Focusing on the deficiencies on performance and security of the existing anonymous broadcast encryption scheme, a new anonymous broadcast encryption scheme based on the Lagrange interpolation polynomial was proposed. Firstly, an anonymous broadcast encryption security model against adaptive adversaries was defined. Then the scheme was constructed based on the Lagrange interpolation polynomial under the composite order bilinear group settings, which ensures user identity anonymity and achieves an efficient encryption and decryption at the same time. Finally, based on the subgroup decision assumption and the composite decisional bilinear Diffie-Hellman assumption, the security was proved in standard model, which shows that the proposed scheme has both ciphertext confidentiality and receiver anonymity against adaptive adversaries. Experimental results and performance analysis show that the proposed method has low communication and computing overhead, and can efficiently solve the anonymous access control issues of ciphertext data in cloud storage.

Key words: cloud storage, access control, anonymous broadcast encryption, Lagrange interpolation polynomial, composite order bilinear group

中图分类号:

TP309.2

许盛伟, 林慕清. 基于匿名广播加密的云存储访问控制方法[J]. 计算机应用, 2017, 37(2): 473-482.

XU Shengwei, LIN Muqing. Anonymous broadcast encryption based access control method for cloud storage[J]. Journal of Computer Applications, 2017, 37(2): 473-482.

参考文献

[1] MATHER T, KUMARASWAMY S, LATIF S. Cloud security and privacy:an enterprise perspective on risks and compliance[M]//Cloud Security and Privacy:An Enterprise Perspective on Risks. Sebastopol, CA:O'Reilly Media, 2009:35-72.
[2] 傅颖勋,罗圣美,舒继武.安全云存储系统与关键技术综述[J].计算机研究与发展,2013,50(1):136-145. (FU Y X, LUO S M, SHU J W. Survey of secure cloud storage system and key technologies[J]. Journal of Computer Research and Development, 2013, 50(1):136-145.).
[3] 李晖,孙文海,李凤华,等.公共云存储服务数据安全及隐私保护技术综述[J].计算机研究与发展,2014,51(7):1397-1409. (LI H, SUN W H, LI F H, et al. Secure and privacy-preserving data storage service in public cloud[J]. Journal of Computer Research and Development, 2014, 51(7):1397-1409.).
[4] YU S, WANG C, REN K, et al. Achieving secure, scalable, and fine-grained data access control in cloud computing[C]//INFOCOM 2010:Proceedings of the 29th Conference on Information Communications. Piscataway, NJ:IEEE, 2010:1-9.
[5] 关志涛,杨亭亭,徐茹枝,等.面向云存储的基于属性加密的多授权中心访问控制方案[J].通信学报,2015,36(6):116-126. (GUAN Z T, YANG T T, XU R Z, et al. Multi-authority attribute-based encryption access control model for cloud storage[J]. Journal on Communications, 2015, 36(6):116-126.).
[6] 洪澄,张敏,冯登国.面向云存储的高效动态密文访问控制方法[J]. 通信学报, 2011, 32(7):125-132. (HONG C, ZHANG M, FENG D G. Achieving efficient dynamic cryptographic access control in cloud storage[J]. Journal on Communications, 2011, 32(7):125-132.).
[7] 郎讯,魏立线,王绪安,等.基于代理重加密的云存储密文访问控制方案[J].计算机应用,2014,34(3):724-727. (LANG X, WEI L X, WANG X A, et al. Cryptographic access control scheme for cloud storage based on proxy re-encryption[J]. Journal of Computer Applications, 2014, 34(3):724-727.).
[8] FIAT A, NAOR M. Broadcast encryption[C]//CRYPTO'93:Proceedings of the 13th Annual International Cryptology Conference on Advances in Cryptology, LNCS 773. Berlin:Springer-Verlag, 1994:480-491.
[9] NAOR D, NAOR M, LOTSPIECH J. Revocation and tracing schemes for stateless receivers[C]//CRYPTO'01:Proceedings of the 21st Annual International Cryptology Conference on Advances in Cryptology, LNCS 2139. Berlin:Springer-Verlag, 2001:41-62.
[10] HALEVY D, SHAMIR A. The LSD broadcast encryption scheme[C]//CRYPTO'02:Proceedings of the 22nd Annual International Cryptology Conference on Advances in Cryptology, LNCS 2442. Berlin:Springer-Verlag, 2002:47-60.
[11] PHAN D H, POINTCHEVAL D, STREFLER M. Decentralized dynamic broadcast encryption[CM]//SCN 2012:Proceedings of the 8th International Conference Security and Cryptography for Networks, LNCS 7485. Berlin:Springer-Verlag, 2012:166-183.
[12] NAOR M, PINKAS B. Efficient trace and revoke schemes[C]//FC 2000:Proceedings of the 4th International Conference on Financial Cryptography, LNCS 1962. Berlin:Springer-Verlag, 2001:1-20.
[13] DODIS Y, FAZIO N. Public key broadcast encryption for stateless receivers[M]//DRM 2002:Proceedings of the ACM CCS-9 Workshop on Digital Rights Management, LNCS 2696. Berlin:Springer-Verlag, 2003:61-80.
[14] BONEH D, GENTRY C, WATERS B. Collusion resistant broadcast encryption with short ciphertexts and private keys[C]//CRYPTO 2005:Proceedings of the 25th Annual International Cryptology Conference on Advances in Cryptology, LNCS 3621. Berlin:Springer-Verlag, 2005:258-275.
[15] GENTRY C, WATERS B. Adaptive security in broadcast encryption systems (with short ciphertexts)[C]//EUROCRYPT'09:Proceedings of the 28th Annual International Conference on the Theory and Applications of Cryptographic Techniques, LNCS 5479. Berlin:Springer-Verlag, 2009:171-188.
[16] PHAN D-H, POINTCHEVAL D, SHAHANDASHTI S F, et al. Adaptive CCA broadcast encryption with constant-size secret keys and ciphertexts[J]. International Journal of Information Security, 2013, 12(4):251-265.
[17] DELERABLÉE C. Identity-based broadcast encryption with constant size ciphertexts and private keys[C]//ASIACRYPT 2007:Proceedings of the 13th International Conference on the Theory and Application of Cryptology and Information Security, LNCS 4833. Berlin:Springer-Verlag, 2007:200-215.
[18] BONEH D, HAMBURG M. Generalized identity based and broadcast encryption schemes[C]//ASIACRYPT 2008:Proceedings of the 14th International Conference on the Theory and Application of Cryptology and Information Security, LNCS 5350. Berlin:Springer-Verlag, 2008:455-470.
[19] ZHANG L, HU Y, WU Q. Adaptively secure identity-based broadcast encryption with constant size private keys and ciphertexts from the subgroups[J]. Mathematical and Computer Modelling, 2012, 55(1/2):12-18.
[20] BARTH A, BONEH D, WATERS B. Privacy in encrypted content distribution using private broadcast encryption[C]//FC 2006:Proceedings of the 10th International Conference on Financial Cryptography and Data Security, LNCS 4107. Berlin:Springer-Verlag, 2006:52-64.
[21] FAZIO N, PERERA I M. Outsider-anonymous broadcast encryption with sublinear ciphertexts[C]//PKC 2012:Proceedings of the 15th International Conference on Practice and Theory in Public Key Cryptography, LNCS 7293. Berlin:Springer-Verlag, 2012:225-242.
[22] LIBERT B, PATERSON K G, QUAGLIA E A. Anonymous broadcast encryption:adaptive security and efficient constructions in the standard model[C]//PKC 2012:Proceedings of the 15th International Conference on Practice and Theory in Public Key Cryptography, LNCS 7293. Berlin:Springer-Verlag, 2012:206-224.
[23] HUR J, PARK C, HWANG S O. Privacy-preserving identity-based broadcast encryption[J]. Information Fusion, 2012, 13(4):296-303.
[24] BONEH D, GOH E-J, NISSIM K. Evaluating 2-DNF formulas on ciphertexts[C]//TCC 2005:Proceedings of the Second Theory of Cryptography Conference, LNCS 3378. Berlin:Springer-Verlag, 2005:325-341.
[25] HILDEBRAND F B. Introduction to Numerical Analysis[M]. 2nd edition. New York:Dover Publications, 1987:25-28.

基于匿名广播加密的云存储访问控制方法

Anonymous broadcast encryption based access control method for cloud storage

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

[1]	葛纪红, 沈韬. 基于区块链的能源数据访问控制方法[J]. 计算机应用, 2021, 41(9): 2615-2622.
[2]	杜心雨, 王化群. LTE-A网络中基于动态组的有效的身份认证和密钥协商方案[J]. 计算机应用, 2021, 41(6): 1715-1722.
[3]	葛丽娜, 胡雨谷, 张桂芬, 陈园园. 云计算环境基于客体属性匹配的逆向混合访问控制方案[J]. 计算机应用, 2021, 41(6): 1604-1610.
[4]	包玉龙, 朱雪阳, 张文辉, 孙鹏飞, 赵颖琪. 物联网应用中访问控制智能合约的形式化验证[J]. 计算机应用, 2021, 41(4): 930-938.
[5]	李秀艳, 刘明曦, 史闻博, 董国芳. 面向资源受限用户的高效动态数据审计方案[J]. 计算机应用, 2021, 41(2): 422-432.
[6]	李莉, 杨鸿飞, 董秀则. 基于身份多条件代理重加密的文件分级访问控制方案[J]. 《计算机应用》唯一官方网站, 2021, 41(11): 3251-3256.
[7]	王海勇, 潘启青, 郭凯璇. 基于区块链和用户信用度的访问控制模型[J]. 计算机应用, 2020, 40(6): 1674-1679.
[8]	唐鑫, 周琳娜. 基于响应模糊化的抗附加块攻击云数据安全去重方法[J]. 计算机应用, 2020, 40(4): 1085-1090.
[9]	史锦山, 李茹, 松婷婷. 基于区块链的物联网访问控制框架[J]. 计算机应用, 2020, 40(4): 931-941.
[10]	付伟, 顾晨阳, 高强. 基于属性加密的多用户共享ORAM方案[J]. 计算机应用, 2020, 40(2): 497-502.
[11]	王海勇, 彭垚, 郭凯璇. 云存储中基于代理重加密的CP-ABE访问控制方案[J]. 计算机应用, 2019, 39(9): 2611-2616.
[12]	柳玉东, 王绪安, 涂广升, 王涵. 全生命周期的云外包数据安全审计协议[J]. 计算机应用, 2019, 39(7): 1954-1958.
[13]	王亚琼, 史国振, 谢绒娜, 李凤华, 王雅哲. 卫星网络中支持策略隐藏的多授权访问控制方案[J]. 计算机应用, 2019, 39(2): 470-475.
[14]	明洋, 何宝康. 支持属性撤销的可验证外包的多授权属性加密方案[J]. 计算机应用, 2019, 39(12): 3556-3562.
[15]	罗霄峰, 杨兴春, 胡勇. 改进的基于属性的访问控制策略评估管理决策图[J]. 计算机应用, 2019, 39(12): 3569-3574.