BGN type outsourcing the decryption of attribute-based encryption ciphertexts

doi:10.11772/j.issn.1001-9081.2017.08.2287

Journal of Computer Applications ›› 2017, Vol. 37 ›› Issue (8): 2287-2291.DOI: 10.11772/j.issn.1001-9081.2017.08.2287

Previous Articles Next Articles

BGN type outsourcing the decryption of attribute-based encryption ciphertexts

LI Zhenlin^1,2, ZHANG Wei^1,2, BAI Ping², WANG Xu'an²

1. Electronic Technique Department, Engineering College of the Chinese Armed Police Force, Xi'an Shaanxi 710086, China;
2. Key Laboratory of Information Security, Engineering College of the Chinese Armed Police Force, Xi'an Shaanxi 710086, China

Received:2017-03-03 Revised:2017-05-02 Online:2017-08-10 Published:2017-08-12
Supported by:
This work is partially supported by the Natural Science Foundation of Shaanxi Province (2016JQ6037).

基于属性的BGN型密文解密外包方案

李镇林^1,2, 张薇^1,2, 白平², 王绪安²

1. 武警工程大学电子技术系, 西安 710086;
2. 武警工程大学信息安全保密重点实验室, 西安 710086

通讯作者: 李镇林
作者简介:李镇林(1992-),男,四川巴中人,硕士研究生,主要研究方向:密码学;张薇(1976-),女,陕西西安人,教授,博士,主要研究方向:密码学、信息安全;白平(1990-),男,内蒙古乌兰察布人,硕士研究生,主要研究方向:密码学;王绪安(1981-),男,湖北公安人,副教授,博士,主要研究方向:密码学、信息安全。
基金资助:
陕西省自然科学基金资助项目（2016JQ6037）。

Abstract

Abstract: Cloud computing security is the key bottleneck that restricts its development, and access control on the result of cloud computing is a hot spot of current research. Based on the classical homomorphic encryption BGN (Boneh-Goh-Nissim) scheme, and combined with outsourcing the decryption of Ciphertext-Policy Attribute-Based Encryption (CP-ABE) ciphertexts, a BGN type outsourcing the decryption of ABE ciphertexts was constructed. In the scheme, partial decryption of ciphertexts was outsourced to the cloud, and only the users whose attributes meet the access policy could get the correct decryption result, thus reducing the storage and computation overhead of users. Compared with the existing outsourcing schemes of ABE, the proposed scheme can operate on ciphertexts for arbitrary additions and one multiplication. Finally, the security of the scheme was analyzed. The proposed scheme is semantically secure under the subgroup decision assumption, and its attribute security is proved under random oracle model.

Key words: attribute-based encryption, cloud computation, outsourcing computing, homomorphic encryption, subgroup decisional problem

摘要： 云计算的安全问题是制约其发展的关键瓶颈，其中对云计算结果的访问控制是当前研究的一个热点。在经典的类同态BGN方案基础上，结合CP-ABE（Ciphertext-Policy Attribute-Based Encryption）型密文解密外包设计，构造了基于属性的BGN型密文解密外包方案，部分密文的解密被外包到云上进行，减小了用户的存储开销与计算开销，并且只有用户属性满足访问策略时，才会得到正确的解密结果。与现有的基于属性的外包方案相比，新方案能对密文进行任意次加法同态和一次乘法同态操作。最后，分析了方案的安全性。所提方案在子群判定问题假设下达到语义安全，在随机预言机模型下满足属性安全。

关键词: 基于属性的加密, 云计算, 外包计算, 同态加密, 子群判定问题

CLC Number:

TP309.7

LI Zhenlin, ZHANG Wei, BAI Ping, WANG Xu'an. BGN type outsourcing the decryption of attribute-based encryption ciphertexts[J]. Journal of Computer Applications, 2017, 37(8): 2287-2291.

李镇林, 张薇, 白平, 王绪安. 基于属性的BGN型密文解密外包方案[J]. 计算机应用, 2017, 37(8): 2287-2291.

References

[1] ERIC H. Head in the clouds[J]. Nature, 2007, 449(7156):963.
[2] KAUFMAN L M. Data security in the world of cloud computing[J]. IEEE Security & Privacy, 2009, 7(4):61-64.
[3] SHAMIR A. Identity-based cryptosystems and signature schemes[C]//CRYPTO 1984:Proceedings of the 1984 Workshop on the Theory and Application of Cryptographic Techniques, LNCS 196. Berlin:Springer-Verlag, 1984:47-53.
[4] SAHAI A, WATERS B. Fuzzy identity-based encryption[C]//EUROCRYPT 2005:Proceedings of the Annual International Conference on the Theory and Applications of Cryptographic Techniques, LNCS 3494. Berlin:Springer-Verlag, 2005:457-473.
[5] PIRRETTI M, TRAYNOR P, MCDANIEL P, et al. Secure attribute-based systems[J]. Journal of Computer Security, 2010, 18(5):799-837.
[6] NING J, DONG X, CAO Z, et al. White-box traceable ciphertext-policy attribute-based encryption supporting flexible attributes[J]. IEEE Transactions on Information Forensics and Security, 2015, 10(6):1274-1288.
[7] ZHANG K, MA J, LIU J, et al. Adaptively secure multi-authority attribute-based encryption with verifiable outsourced decryption[J]. Science China Information Sciences, 2016, 59:99105.
[8] GREEN M, HOHENBERGER S, WATERS B. Outsourcing the decryption of ABE ciphertexts[C]//SEC' 11:Proceedings of the 20th USENIX Conference on Security. Berkeley, CA:USENIX Association, 2011:34.
[9] WAN Z, LIU J, DENG R H. HASBE:a hierarchical attribute-based solution for flexible and scalable access control in cloud computing[J]. IEEE Transactions on Information Forensics and Security, 2012, 7(2):743-754.
[10] YANG K, JIA X, REN K, et al. DAC-MACS:effective data access control for multiauthority cloud storage systems[J]. IEEE Transactions on Information Forensics and Security, 2013, 8(11):1790-1801.
[11] WANG S, ZHOU J, LIU J, et al. An efficient file hierarchy attribute-based encryption scheme in cloud computing[J]. IEEE Transactions on Information Forensics & Security, 2016, 11(6):1265-1277.
[12] BONEH D, GOH E-J, NISSIM K. Evaluating 2-DNF formulas on ciphertexts[C]//TCC 2005:Proceedings of the 2005 Second International Conference on Theory of Cryptography. Springer Berlin Heidelberg, LNCS 3378. Berlin:Springer-Verlag, 2005:325-341.
[13] WATERS B. Ciphertext-policy attribute-based encryption:an expressive, efficient, and provably secure realization[C]//PKC' 11:Proceedings of the 14th International Conference on Public Key Cryptography, LNCS 6571. Berlin:Springer-Verlag, 2011:53-70.
[14] RIVEST R L, ADLEMAN L, DERTOUZOS M L. On data banks and privacy homomorphisms[J]. Foundations of Secure Computation, 1978, 4(11):169-179.
[15] GENTRY C, HALEVI S, VAIKUNTANATHAN V. A simple BGN-type cryptosystem from LWE[C]//EUROCRYPT 2010:Proceedings of the 2010 Annual International Conference on the Theory and Applications of Cryptographic Techniques, LNCS 6110. Berlin:Springer-Verlag, 2010:506-522.
[16] MENEZES A J, VAN OORSCHOT P, VANSTONE S A. Handbook of applied cryptography[S]. Boca Raton, FL:CRC Press, 1999:425-488.

BGN type outsourcing the decryption of attribute-based encryption ciphertexts

基于属性的BGN型密文解密外包方案

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics

[1]	CHEN Jiahao, YIN Xinchun. Traceable and revocable ciphertext-policy attribute-based encryption scheme based on cloud-fog computing [J]. Journal of Computer Applications, 2021, 41(6): 1611-1620.
[2]	ZHENG Shangwen, LIU Yao, ZHOU Tanping, YANG Xiaoyuan. Optimized CKKS scheme based on learning with errors problem [J]. Journal of Computer Applications, 2021, 41(6): 1723-1728.
[3]	Xiaoqiong PANG, Ting YANG, Wenjun CHEN, Yunting WANG, Tianye LIU. Digital rights management scheme based on secret sharing in blockchain environment [J]. Journal of Computer Applications, 2021, 41(11): 3257-3265.
[4]	Lifeng GUO, Qianli WANG. Adaptive secure outsourced attribute-based encryption scheme with keyword search [J]. Journal of Computer Applications, 2021, 41(11): 3266-3273.
[5]	MA Minyao, LIU Zhuo, XU Yi, WU Lian. Private-preserving determination problem of integer-interval positional relationship [J]. Journal of Computer Applications, 2020, 40(9): 2657-2664.
[6]	CHE Xiaoliang, ZHOU Haonan, ZHOU Tanping, LI Ningbo, YANG Xiaoyuan. Decryption structure of multi-key homomorphic encryption scheme based on NTRU [J]. Journal of Computer Applications, 2020, 40(7): 1959-1964.
[7]	MA Minyao, WU Lian, LIU Zhuo, XU Yi. Privacy-preserving determination of integer point-interval relationship [J]. Journal of Computer Applications, 2020, 40(7): 1983-1988.
[8]	WANG Haiyong, PENG Yao, GUO Kaixuan. CP-ABE access control scheme based on proxy re-encryption in cloud storage [J]. Journal of Computer Applications, 2019, 39(9): 2611-2616.
[9]	MA Minyao, XU Yi, LIU Zhuo. Privacy preserving Hamming distance computing problem of DNA sequences [J]. Journal of Computer Applications, 2019, 39(9): 2636-2640.
[10]	YU Qingfei, TU Guangsheng, LI Ningbo, ZHOU Tanping. Multi-hop multi-policy attributed-based fully homomorphic encryption scheme [J]. Journal of Computer Applications, 2019, 39(8): 2326-2332.
[11]	TU Guangsheng, YANG Xiaoyuan, ZHOU Tanping. Efficient identity-based multi-identity fully homomorphic encryption scheme [J]. Journal of Computer Applications, 2019, 39(3): 750-755.
[12]	WANG Yaqiong, SHI Guozhen, XIE Rongna, LI Fenghua, WANG Yazhe. Multi-authority access control scheme with policy hiding of satellite network [J]. Journal of Computer Applications, 2019, 39(2): 470-475.
[13]	LI Cong, YANG Xiaoyuan, BAI Ping, WANG Xu'an. Traceable and fully verifiable for outsourced decryption for CP-ABE [J]. Journal of Computer Applications, 2018, 38(8): 2249-2255.
[14]	ZHANG En, JIN Ganggang. Cloud outsourcing multiparty private set intersection protocol based on homomorphic encryption and Bloom filter [J]. Journal of Computer Applications, 2018, 38(8): 2256-2260.
[15]	LI Cong, YANG Xiaoyuan, WANG Xu'an. Effecient outsourced computing based on extended attribute-based functional encryption [J]. Journal of Computer Applications, 2018, 38(6): 1633-1639.