基于云雾计算的可追踪可撤销密文策略属性基加密方案

doi:10.11772/j.issn.1001-9081.2020121955

计算机应用 ›› 2021, Vol. 41 ›› Issue (6): 1611-1620.DOI: 10.11772/j.issn.1001-9081.2020121955

所属专题： 2020年全国开放式分布与并行计算学术年会（DPCS 2020）

• 2020年全国开放式分布与并行计算学术年会（DPCS 2020） • 上一篇下一篇

基于云雾计算的可追踪可撤销密文策略属性基加密方案

陈家豪¹, 殷新春^1,2

1. 扬州大学信息工程学院, 江苏扬州 225127;
2. 扬州大学广陵学院, 江苏扬州 225128

收稿日期:2020-11-04 修回日期:2021-03-29 出版日期:2021-06-10 发布日期:2021-06-21
通讯作者: 殷新春
作者简介:陈家豪(1997-),男,安徽安庆人,硕士研究生,主要研究方向:密码学、物联网安全、加密算法和协议;殷新春(1962-),男,江苏姜堰人,教授,博士生导师,博士,CCF会员,主要研究方向:密码学、软件质量保障、高性能计算。
基金资助:
国家自然科学基金资助项目（61472343）。

Traceable and revocable ciphertext-policy attribute-based encryption scheme based on cloud-fog computing

CHEN Jiahao¹, YIN Xinchun^1,2

1. College of Information Engineering, Yangzhou University, Yangzhou Jiangsu 225127, China;
2. Guangling College of Yangzhou University, Yangzhou Jiangsu 225128, China

Received:2020-11-04 Revised:2021-03-29 Online:2021-06-10 Published:2021-06-21
Supported by:
This work is partially supported by the National Natural Science Foundation of China (61472343).

摘要/Abstract

摘要： 针对资源受限的边缘设备在属性基加密中存在的解密工作开销较大，以及缺乏有效的用户追踪与撤销的问题，提出了一种支持云雾计算的可追踪可撤销的密文策略属性基加密（CP-ABE）方案。首先，通过对雾节点的引入，使得密文存储、外包解密等工作能够放在距离用户更近的雾节点进行，这样既有效地保护了用户的隐私数据，又减少了用户的计算开销；其次，针对属性基加密系统中用户权限变更、用户有意或无意地泄露自己密钥等行为，加入了用户的追踪和撤销功能；最后，通过算法追踪到做出上述行为的恶意用户身份后，将该用户加入撤销列表，从而取消该用户访问权限。性能分析表明，所提方案用户端的解密开销降低至一次乘法运算和一次指数运算，能够为用户节省大量带宽与解密时间，且该方案支持恶意用户的追踪与撤销。因此所提方案适用于云雾环境下计算资源受限设备的数据共享。

关键词: 密文策略属性基加密, 云计算, 雾计算, 外包解密, 用户可追踪, 用户可撤销

Abstract: Focusing on the large decryption overhead of the resource limited edge devices and the lack of effective user tracking and revocation in attribute-based encryption, a traceable and revocable Ciphertext-Policy Attribute-Based Encryption (CP-ABE) scheme supporting cloud-fog computing was proposed. Firstly, through the introduction of fog nodes, the ciphertext storage and outsourcing decryption were able to be carried out on fog nodes near the users, which not only effectively protected users' private data, but also reduced users' computing overhead. Then, in response to the behaviors such as user permission changes, users intentionally or unintentionally leaking their own keys in the attribute-based encryption system, user tracking and revocation functions were added. Finally, after the identity of malicious user with the above behaviors was tracked through the algorithm, the user would be added to the revocation list, so that user's access right was cancelled. The performance analysis shows that the decryption overhead at the user end is reduced to one multiplication and one exponential operation, which can save large bandwidth and decryption time for users; at the same time, the proposed scheme supports the tracking and revocation of malicious users. Therefore, the proposed scheme is suitable for data sharing of devices with limited computing resources in cloud-fog environment.

Key words: Ciphertext-Policy Attribute-Based Encryption (CP-ABE), cloud computing, fog computing, outsourcing decryption, user traceable, user revocable

中图分类号:

TP309.7

陈家豪, 殷新春. 基于云雾计算的可追踪可撤销密文策略属性基加密方案[J]. 计算机应用, 2021, 41(6): 1611-1620.

CHEN Jiahao, YIN Xinchun. Traceable and revocable ciphertext-policy attribute-based encryption scheme based on cloud-fog computing[J]. Journal of Computer Applications, 2021, 41(6): 1611-1620.

参考文献

[1] WOOD T,RAMAKRISHNAN K,SHENOY P,et al. CloudNet:dynamic pooling of cloud resources by live WAN migration of virtual machines[J]. IEEE/ACM Transactions on Networking,2015,23(5):1568-1583.
[2] YI S,QIN Z,LI Q. Security and privacy issues of fog computing:a survey[C]//Proceedings of the 2015 International Conference on Wireless Algorithms,Systems,and Applications,LNCS 9204. Cham:Springer,2015:685-695.
[3] Statista. Forecast of fog computing market revenue worldwide from 2018 to 2022[EB/OL].[2020-08-12]. https://www.statista.com/statistics/830485/world-fog-computing-revenue-by-vertical/.
[4] STOJMENOVIC I,WEN S. The fog computing paradigm:scenarios and security issues[C]//Proceedings of the 2014 Federated Conference on Computer Science and Information Systems. Piscataway:IEEE,2014:1-8.
[5] ROMAN R,LOPEZ J,MAMBO M. Mobile edge computing,Fog et al.:A survey and analysis of security threats and challenges[J]. Future Generation Computer Systems,2018,78(Pt 2):680-698.
[6] STOJMENOVIC I,WEN S,HUANG X,et al. An overview of fog computing and its security issues[J]. Concurrency and Computation:Practice and Experience,2016,28(10):2991-3005.
[7] HUANG X,XIANG Y,BERTINO E,et al. Robust multi-factor authentication for fragile communications[J]. IEEE Transactions on Dependable and Secure Computing,2014,11(6):568-581.
[8] CHOO K K R, DOMINGO-FERRER J, ZHANG L. Cloud cryptography:theory,practice and future research directions[J]. Future Generation Computer Systems,2016,62:51-53.
[9] SAHAI A,WATERS B. Fuzzy identity-based encryption[C]//Proceedings of the 2005 Annual International Conference on the Theory and Applications of Cryptographic Techniques,LNCS 3494. Berlin:Springer,2005:457-473.
[10] GOYAL V, PANDEY O, SAHAI A, et al. Attribute-based encryption for fine-grained access control of encrypted data[C]//Proceedings of the 2006 13th ACM Conference on Computer and Communications Security. New York:ACM,2006:89-98.
[11] BETHENCOURT J,SAHAI A,WATERS B. Ciphertext-policy attribute-based encryption[C]//Proceedings of the 2007 IEEE Symposium on Security and Privacy. Piscataway:IEEE,2007:321-334.
[12] LIU Z,CAO Z,WONG D S. White-box traceable ciphertextpolicy attribute-based encryption supporting any monotone access structures[J]. IEEE Transactions on Information Forensics and Security,2013,8(1):76-88.
[13] NING J,CAO Z,DONG X,et al. Large universe ciphertextpolicy attribute-based encryption with white-box traceability[C]//Proceedings of the 2014 European Symposium on Research in Computer Security,LNCS 8713. Cham:Springer,2014:55-72.
[14] NING J,DONG X,CAO Z,et al. White-box traceable ciphertextpolicy attribute-based encryption supporting flexible attributes[J]. IEEE Transactions on Information Forensics and Security, 2015,10(6):1274-1288.
[15] YANG K,JIA X,REN K. Attribute-based fine-grained access control with efficient revocation in cloud storage systems[C]//Proceedings of the 2013 8th ACM SIGSAC Symposium on Information,Computer and Communications Security. New York:ACM,2013:523-528.
[16] 高嘉昕, 孙加萌, 秦静. 支持属性撤销的可追踪外包属性加密方案[J]. 计算机研究与发展, 2019, 56(10):2160-2169.(GAO J X, SUN J M, QIN J. Traceable outsourcing attribute-based encryption with attribute revocation[J]. Journal of Computer Research and Development,2019,56(10):2160-2169.)
[17] 王鹏翩, 冯登国, 张立武. 一种支持完全细粒度属性撤销的CPABE方案[J]. 软件学报, 2012, 23(10):2805-2816.(WANG P P,FENG D G,ZHANG L W. CP-ABE scheme supporting fully fine-grained attribute revocation[J]. Journal of Software,2012, 23(10):2805-2816.)
[18] 明洋, 何宝康. 支持属性撤销的可验证外包的多授权属性加密方案[J]. 计算机应用, 2019, 39(12):3556-3562.(MING Y,HE B K. Attribute revocation and verifiable outsourcing supported multi-authority attribute-based encryption scheme[J]. Journal of Computer Applications,2019,39(12):3556-3562.)
[19] YU S,WANG C,REN K,et al. Attribute based data sharing with attribute revocation[C]//Proceedings of the 2010 5th ACM Symposium on Information, Computer and Communications Security. New York:ACM,2010:261-270.
[20] LI Y,ZHU J,WANG X,et al. Optimized ciphertext-policy attribute-based encryption with efficient revocation[J]. International Journal of Security and Its Applications,2013,7(6):385-394.
[21] LI Q,XIONG H,ZHANG F. Broadcast revocation scheme in composite-order bilinear group and its application to attributebased encryption[J]. International Journal of Security and Networks,2013,8(1):1-12.
[22] SHI Y,ZHENG Q,LIU J,et al. Directly revocable key-policy attribute-based encryption with verifiable ciphertext delegation[J]. Information Sciences,2015,295:221-231.
[23] 林娟, 薛庆水, 曹珍富. 基于代理的即时属性撤销KP-ABE方案[J]. 计算机工程, 2014, 40(10):20-24.(LING J,XUE Q S, CAO Z F. Proxy-based immediate attribute revocation KP-ABE scheme[J]. Computer Engineering,2014,40(10):20-24.)
[24] XU S,NING J,LI Y,et al. Match in my way:fine-grained bilateral access control for secure cloud-fog computing[J]. IEEE Transaction on Dependable and Secure Computing,2020(Early Access):1-15.
[25] LIU Z, DUAN S, ZHOU P, et al. Traceable-then-revocable ciphertext-policy attribute-based encryption scheme[J]. Future Generation Computer Systems,2019,93:903-913.
[26] XU S,YANG G,MU Y,et al. Secure fine-grained access control and data sharing for dynamic groups in the cloud[J] IEEE Transactions on Information Forensics and Security,2018,13(8):2101-2113.
[27] WATERS B. Ciphertext-policy attribute-based encryption:an expressive, efficient, and provably secure realization[C]//Proceedings of the 2011 International Workshop on Public Key Cryptography,LNCS 6571. Berlin:Springer,2011:53-70.
[28] JIANG Y,SUSILO W,MU Y,et al. Ciphertext-policy attributebased encryption against key-delegation abuse in fog computing[J]. Future Generation Computer Systems,2018,78(Pt2):720-729.
[29] HOANG V H,LEHTIHET E,GHAMRI-DOUDANE Y. Forwardsecure data outsourcing based on revocable attribute-based encryption[C]//Proceedings of the 2019 15th International Wireless Communications and Mobile Computing Conference. Piscataway:IEEE,2019:1839-1846.
[30] ZHANG Y,ZHENG D,DENG R H. Security and privacy in smart health:efficient policy-hiding attribute-based access control[J]. IEEE Internet of Things Journal,2018,5(3):2130-2145.
[31] WANG S, GUO K, ZHANG Y. Traceable ciphertext-policy attribute-based encryption scheme with attribute level user revocation for cloud storage[J]. PLoS ONE,2018,13(9):Article No. e0203225.
[32] LI L, WANG Z, LI N. Efficient attribute-based encryption outsourcing scheme with user and attribute revocation for fogenabled IoT[J]. IEEE Access,2020,8:176738-176749.

基于云雾计算的可追踪可撤销密文策略属性基加密方案

Traceable and revocable ciphertext-policy attribute-based encryption scheme based on cloud-fog computing

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

[1]	葛丽娜, 胡雨谷, 张桂芬, 陈园园. 云计算环境基于客体属性匹配的逆向混合访问控制方案[J]. 计算机应用, 2021, 41(6): 1604-1610.
[2]	杨翎, 姜春茂. 基于三支决策的虚拟机节能迁移策略[J]. 计算机应用, 2021, 41(4): 990-998.
[3]	吕佳玉, 竺智荣, 姚志强. 云计算环境下的双通道数据动态加密策略[J]. 计算机应用, 2020, 40(8): 2268-2273.
[4]	陈程军, 毛莺池, 王绎超. 基于激活-熵的分层迭代剪枝策略的CNN模型压缩[J]. 计算机应用, 2020, 40(5): 1260-1265.
[5]	郭曙杰, 李志华, 蔺凯青. 云环境下基于模糊隶属度的虚拟机放置算法[J]. 计算机应用, 2020, 40(5): 1374-1381.
[6]	许英鑫, 孙磊, 赵建成, 郭松辉. 基于蚁群优化算法的虚拟现场可编程门阵列部署策略[J]. 计算机应用, 2020, 40(3): 747-752.
[7]	王庆永, 毛莺池, 王绎超, 王龙宝. 基于多微云协作的计算任务卸载[J]. 计算机应用, 2020, 40(2): 328-334.
[8]	刘福鑫, 李劲巍, 王熠弘, 李琳. 基于Kubernetes的云原生海量数据存储系统设计与实现[J]. 计算机应用, 2020, 40(2): 547-552.
[9]	杨哂哂, 吴慧珍, 庄黎丽, 吕宏武. 基于Markov过程的IaaS系统可用性建模与分析方法[J]. 计算机应用, 2020, 40(10): 3013-3018.
[10]	林立, 熊金波, 肖如良, 林铭炜, 陈秀华. Gaming@Edge:基于边缘节点的低延迟云游戏系统[J]. 计算机应用, 2019, 39(7): 2001-2007.
[11]	徐雅斌, 彭宏恩. 基于需求预测的PaaS平台资源分配方法[J]. 计算机应用, 2019, 39(6): 1583-1588.
[12]	李启锐, 彭志平, 崔得龙, 何杰光. 容器云环境虚拟资源配置策略的优化[J]. 计算机应用, 2019, 39(3): 784-789.
[13]	李磊, 薛洋, 吕念玲, 冯敏. 基于李雅普诺夫优化的容器云队列在线任务和资源调度设计[J]. 计算机应用, 2019, 39(2): 494-500.
[14]	郭棉, 李绮琦. 面向延迟敏感型物联网应用的计算迁移策略[J]. 计算机应用, 2019, 39(12): 3590-3596.
[15]	王占君, 马海英, 王金华, 李燕. 可外包解密和成员撤销的身份基加密方案[J]. 计算机应用, 2019, 39(12): 3563-3568.