Ciphertext policy attribute-based encryption scheme with weighted attribute revocation

doi:10.11772/j.issn.1001-9081.2017.12.3423

Journal of Computer Applications ›› 2017, Vol. 37 ›› Issue (12): 3423-3429.DOI: 10.11772/j.issn.1001-9081.2017.12.3423

Previous Articles Next Articles

Ciphertext policy attribute-based encryption scheme with weighted attribute revocation

WANG Jingwei, YIN Xinchun

School of Information Engineering, Yangzhou University, Yangzhou Jiangsu 225127, China

Received:2017-06-13 Revised:2017-07-30 Online:2017-12-10 Published:2017-12-18
Supported by:
This work is partially supported by the National Natural Science Foundation of China (61472343).

支持带权属性撤销的密文策略属性基加密方案

王经纬, 殷新春

扬州大学信息工程学院, 江苏扬州 225127

通讯作者: 殷新春
作者简介:王经纬(1993-),男,江苏镇江人,硕士研究生,主要研究方向:密码学;殷新春(1962-),男,江苏姜堰人,教授,博士,CCF高级会员,主要研究方向:密码学、软件质量保障、高性能计算。
基金资助:
国家自然科学基金资助项目（61472343）。

Abstract

Abstract: Most of the existing Ciphertext-Policy Attribute-Based Encryption (CP-ABE) schemes cannot support multi-state representation of attributes, and the computation overhead of encryption and decryption phase is huge. In order to solve the problems, a CP-ABE scheme with Weighted Attribute Revocation (CPABEWAR) was proposed. On the one hand, the expression ability of attribute was improved by introducing the concept of weighted attribute. On the other hand, in order to reduce the computation cost, part calculation tasks were outsourced to Cloud Service Provider (CSP) under the premise of ensuring data securer. The analysis results show that, the proposed CPABEWAR is proved to be Chosen Plaintext Secure (CPS) under the Decisional Bilinear Diffie-Hellman (DBDH) assumption. The proposed scheme simplifies the access tree structure at the cost of a small amount of storage space and improves system efficiency and flexibility of access control, which is suitable for cloud users with limited computing power.

Key words: Attribute-Based Encryption (ABE), attribute revocation, access control, Decisional Bilinear Diffie-Hellman (DBDH) assumption, cloud storage

摘要： 针对目前大部分密文策略属性基加密（CP-ABE）方案都不支持属性的多状态表示，加密、解密阶段计算开销庞大的问题，提出一种支持带权属性撤销的CP-ABE方案（CPABEWAR）。一方面，通过引入带权属性的概念，增强了属性的表达能力；另一方面，为了降低计算开销，在保证数据安全的情况下将部分计算过程外包给云服务提供商（CSP）。分析结果表明，所提方案基于判定双线性DH （DBDH）假设是选择明文安全的（CPS）。所提方案以增加少量存储空间为代价简化了访问树结构，提高了系统效率和访问控制的灵活性，适合计算能力受限的云用户。

关键词: 属性基加密, 属性撤销, 访问控制, 判定双线性DH假设, 云存储

CLC Number:

TP309.7

WANG Jingwei, YIN Xinchun. Ciphertext policy attribute-based encryption scheme with weighted attribute revocation[J]. Journal of Computer Applications, 2017, 37(12): 3423-3429.

王经纬, 殷新春. 支持带权属性撤销的密文策略属性基加密方案[J]. 计算机应用, 2017, 37(12): 3423-3429.

References

[1] NIST S P. A NIST definition of cloud computing[J]. Communications of the ACM, 2015, 53(6):50.
[2] WOOD T, RAMAKRISHNAN K K, SHENOY P, et al. CloudNet:dynamic pooling of cloud resources by live WAN migration of virtual machines[J]. IEEE/ACM Transactions on Networking, 2015, 23(5):1568-1583.
[3] CHOO K K R. Cloud computing:challenges and future directions[J]. Trends & Issues in Crime & Criminal Justice, 2010(400):1-6.
[4] ESPOSITO C, CASTIGLIONE A, MARTINI B, et al. Cloud manufacturing:security, privacy, and forensic concerns[J]. IEEE Cloud Computing, 2016, 3(4):16-22.
[5] SAHAI A, WATERS B. Fuzzy identity-based encryption[C]//Proceedings of the 2005 Annual International Conference on the Theory and Applications of Cryptographic Techniques, LNCS 3494. Berlin:Springer, 2005:457-473.
[6] BETHENCOURT J, SAHAI A, WATERS B. Ciphertext-policy attribute-based encryption[C]//Proceedings of the 2007 IEEE Symposium on Security & Privacy. Piscataway, NJ:IEEE, 2007:321-334.
[7] GOVAL V, PANDEY O, SAHAI A, et al. Attribute-based encryption for fine-grained access control of encrypted data[C]//Proceedings of the 200613th ACM Conference on Computer and Communications Security. New York:ACM, 2006:89-98.
[8] TOUATI L, CHALLAL Y. Batch-based CP-ABE with attribute revocation mechanism for the Internet of things[C]//Proceedings of the 2015 International Conference on Computing, Networking and Communications. Piacataway, NJ:IEEE, 2015:1044-1049.
[9] BOLDYREVA A, GOYAL V, KUMAR V. Identity-based encryption with efficient revocation[C]//Proceedings of the 200815th ACM Conference on Computer and Communications Security. New York:ACM, 2008:417-426.
[10] YU S, WANG C, REN K, et al. Attribute based data sharing with attribute revocation[C]//Proceedings of the 20105th ACM Symposium on Information, Computer and Communications Security. New York:ACM, 2010:261-270.
[11] TYSOWSKI P K, HASAN M A. Hybrid attribute-and re-encryption-based key management for secure and scalable mobile applications in clouds[J]. IEEE Transactions on Cloud Computing, 2013, 1(2):172-186.
[12] LI J G, YAO W, ZHANG Y C, et al. Flexible and fine-grained attribute-based data storage in cloud computing[J]. IEEE Transactions on Services Computing, 2017, 10(5):785-796.
[13] XU X L, ZHOU J L, WANG X H, et al. Multi-authority proxy re-encryption based on CPABE for cloud storage systems[J]. Journal of Systems Engineering and Electronics, 2016, 27(1):211-223.
[14] 闫玺玺,孟慧.支持直接撤销的密文策略属性基加密方案[J].通信学报,2016,37(5):44-50.(YAN X X, MENG H. Ciphertext policy attribute-based encryption scheme supporting direct revocation[J]. Journal on Communications, 2016, 37(5):44-50.)
[15] ZHANG Y H, CHEN X F, LI J, et al. Anonymous attribute-based encryption supporting efficient decryption test[C]//Proceedings of the 20138th ACM SIGSAC Symposium on Information, Computer and Communications Security. New York:ACM, 2013:511-516.
[16] LIU X M, MA J, XIONG J B, et al. Ciphertext-policy hierarchical attribute-based encryption for fine-grained access control of encryption data[J]. International Journal of Network Security, 2014, 16(6):437-443.
[17] WANG S L, LIANG K T, LIU J K, et al. Attribute-based data sharing scheme revisited in cloud computing[J]. IEEE Transactions on Information Forensics & Security, 2016, 11(8):1661-1673.
[18] XIE X X, MA H, LI J, et al. An efficient ciphertext-policy attribute-based access control towards revocation in cloud computing[J]. Journal of Universal Computer Science, 2013, 19(16):2349-2367.
[19] DAN B. The decision Diffie-Hellman problem[C]//Proceedings of the 19983rd International Symposium on Algorithmic Number Theory, LNCS 1423. London:Springer, 1998:48-63.

Ciphertext policy attribute-based encryption scheme with weighted attribute revocation

支持带权属性撤销的密文策略属性基加密方案

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics

[1]	GE Jihong, SHEN Tao. Energy data access control method based on blockchain [J]. Journal of Computer Applications, 2021, 41(9): 2615-2622.
[2]	GE Lina, HU Yugu, ZHANG Guifen, CHEN Yuanyuan. Reverse hybrid access control scheme based on object attribute matching in cloud computing environment [J]. Journal of Computer Applications, 2021, 41(6): 1604-1610.
[3]	DU Xinyu, WANG Huaqun. Dynamic group based effective identity authentication and key agreement scheme in LTE-A networks [J]. Journal of Computer Applications, 2021, 41(6): 1715-1722.
[4]	BAO Yulong, ZHU Xueyang, ZHANG Wenhui, SUN Pengfei, ZHAO Yingqi. Formal verification of smart contract for access control in IoT applications [J]. Journal of Computer Applications, 2021, 41(4): 930-938.
[5]	LI Xiuyan, LIU Mingxi, SHI Wenbo, DONG Guofang. Efficient dynamic data audit scheme for resource-constrained users [J]. Journal of Computer Applications, 2021, 41(2): 422-432.
[6]	Xiaoqiong PANG, Ting YANG, Wenjun CHEN, Yunting WANG, Tianye LIU. Digital rights management scheme based on secret sharing in blockchain environment [J]. Journal of Computer Applications, 2021, 41(11): 3257-3265.
[7]	Lifeng GUO, Qianli WANG. Adaptive secure outsourced attribute-based encryption scheme with keyword search [J]. Journal of Computer Applications, 2021, 41(11): 3266-3273.
[8]	Li LI, Hongfei YANG, Xiuze DONG. Hierarchical file access control scheme with identity-based multi-conditional proxy re-encryption [J]. Journal of Computer Applications, 2021, 41(11): 3251-3256.
[9]	WANG Haiyong, PAN Qiqing, GUO Kaixuan. Access control model based on blockchain and user credit [J]. Journal of Computer Applications, 2020, 40(6): 1674-1679.
[10]	TANG Xin, ZHOU Linna. Response obfuscation based secure deduplication method for cloud data with resistance against appending chunk attack [J]. Journal of Computer Applications, 2020, 40(4): 1085-1090.
[11]	SHI Jinshan, LI Ru, SONG Tingting. Blockchain-based access control framework for Internet of things [J]. Journal of Computer Applications, 2020, 40(4): 931-941.
[12]	FU Wei, GU Chenyang, GAO Qiang. Multi-user sharing ORAM scheme based on attribute encryption [J]. Journal of Computer Applications, 2020, 40(2): 497-502.
[13]	WANG Haiyong, PENG Yao, GUO Kaixuan. CP-ABE access control scheme based on proxy re-encryption in cloud storage [J]. Journal of Computer Applications, 2019, 39(9): 2611-2616.
[14]	YU Qingfei, TU Guangsheng, LI Ningbo, ZHOU Tanping. Multi-hop multi-policy attributed-based fully homomorphic encryption scheme [J]. Journal of Computer Applications, 2019, 39(8): 2326-2332.
[15]	LIU Yudong, WANG Xu'an, TU Guangsheng, WANG Han. Cloud outsourcing data secure auditing protocol throughout whole lifecycle [J]. Journal of Computer Applications, 2019, 39(7): 1954-1958.