《计算机应用》唯一官方网站

• •    下一篇

基于IBBE的区块链访问控制方案

冀雨馨,邵奇峰,谭江海   

  1. 中原工学院
  • 收稿日期:2026-02-04 修回日期:2026-03-20 发布日期:2026-04-24 出版日期:2026-04-24
  • 通讯作者: 邵奇峰

Blockchain access control scheme based on IBBE

  • Received:2026-02-04 Revised:2026-03-20 Online:2026-04-24 Published:2026-04-24

摘要: 现有区块链访问控制方案撤销权限时,因多轮加密并传播新密钥导致了高昂的计算和存储开销。为此,提出了基于身份广播加密(IBBE)的区块链访问控制方案,该方案利用IBBE的单次广播特性,在权限撤销时仅需将目标用户从接收者身份集合中移除,避免了对逐个用户重新加密密钥,显著降低了权限撤销的计算与存储负担;进而结合区块链组织架构设计了分组机制,降低了IBBE的计算复杂度;同时针对链上存储容量受限问题,构建了链上链下协同存储机制缓解了链上存储开销。实验结果表明,IBBE在成员撤销时的加密延迟较基于身份加密(IBE)降低约80%,存储开销较HE有数量级降低;分组优化后的加密延迟较优化前降低了约70%。

Abstract: When revoking permissions in existing blockchain access control schemes, multiple rounds of encryption and the dissemination of new keys resulted in high computational and storage overhead. To address this, a blockchain access control scheme based on Identity-Based Broadcast Encryption (IBBE) was proposed. This scheme leveraged the single broadcast characteristic of IBBE, requiring only the removal of the target user from the receiver identity set during permission revocation, thus avoiding the need to re-encrypt keys for each user individually, significantly reducing the computational and storage burden of permission revocation. Furthermore, a grouping mechanism was designed in conjunction with the blockchain organizational structure to reduce the computational complexity of IBBE. At the same time, to address the limited storage capacity on the blockchain, a collaborative storage mechanism between on-chain and off-chain storage was constructed to alleviate the storage overhead on the blockchain. Experimental results show that IBBE reduces encryption latency by approximately 80% compared to IBE and significantly reduces storage overhead compared to HE during member revocation. The optimized encryption latency after grouping is reduced by approximately 70% compared with before optimization.

中图分类号: