Multi-user sharing ORAM scheme based on attribute encryption

doi:10.11772/j.issn.1001-9081.2019091634

Journal of Computer Applications ›› 2020, Vol. 40 ›› Issue (2): 497-502.DOI: 10.11772/j.issn.1001-9081.2019091634

• CCF Bigdata 2019 • Previous Articles Next Articles

Multi-user sharing ORAM scheme based on attribute encryption

Wei FU¹, Chenyang GU¹(), Qiang GAO²

^1.Department of Information Security，Naval University of Engineering，Wuhan Hubei 430033，China
^2.Command and Support Brigade，Naval Staff，Beijing 100841，China

Received:2019-08-20 Revised:2019-09-25 Accepted:2019-10-09 Online:2019-11-25 Published:2020-02-10
Contact: Chenyang GU
About author:FU Wei， born in 1978， Ph. D.， associate professor. His research interests include cloud computing， cloud security， distributed computing， information security.
GAO Qiang， born in 1982， M. S. His research interests include Cloud computing， cloud security， big data storage.
Supported by:
the National Natural Science Foundation of China(61672531);the Sub-project for Major Logistics Technology Project(AWS14R013)

基于属性加密的多用户共享ORAM方案

付伟¹, 顾晨阳¹(), 高强²

^1.海军工程大学信息安全系，武汉 430033
^2.海军联合参谋部指挥保障大队，北京 100841

通讯作者: 顾晨阳
作者简介:付伟（1978—），男，湖北武汉人，副教授，博士，CCF会员，主要研究方向：云计算、云安全、分布式计算、信息安全
高强（1982—），男，北京人，硕士，主要研究方向：云计算、云安全、大数据存储。
基金资助:
国家自然科学基金资助项目(61672531);总装后勤科技重大项目子课题(AWS14R013)

Abstract

Abstract:

Oblivious Random Access Machine （ORAM） is one of the key technologies to protect the privacy security of the user access behaviors. However， existing ORAM schemes mainly focus on the single-user access requirements and cannot support data sharing between multiple users. Combined with Ring ORAM scheme and Attribute Based Encryption （ABE） technology， a multi-user sharing ORAM scheme was designed and implemented based on attribute encryption， namely ABE-M-ORAM. Attribute encryption was adopted to achieve the fine-grained access control， which can not only protect user access behavior security， but also realize the convenient data sharing between different users. Theoretical analysis and simulation experiments verify the high security， practicability and good access performance of the proposed scheme.

Key words: cloud storage security, Oblivious Random Access Machine (ORAM), multi-user sharing, attribute encryption, access control

摘要：

不经意随机访问机（ORAM）是保护用户访问行为隐私安全的关键技术之一，但现有ORAM方案主要针对单用户访问需求，不支持多用户之间的数据共享。结合Ring ORAM方案和属性加密（ABE）技术，设计并实现了一种基于属性加密的多用户共享ORAM方案ABE-M-ORAM。该方案利用属性加密实现了细粒度的访问控制，既保护了用户访问行为的安全，又实现了用户之间便捷的数据共享。理论分析和仿真实验证明该方案具有较高的安全性、实用性以及较好的访问性能。

关键词: 云存储安全, 不经意随机访问机, 多用户共享, 属性加密, 访问控制

CLC Number:

TP309

Wei FU, Chenyang GU, Qiang GAO. Multi-user sharing ORAM scheme based on attribute encryption[J]. Journal of Computer Applications, 2020, 40(2): 497-502.

付伟, 顾晨阳, 高强. 基于属性加密的多用户共享ORAM方案[J]. 《计算机应用》唯一官方网站, 2020, 40(2): 497-502.

Figures/Tables 6

Fig. 1 Attribute encryption model

Fig. 2 Data structure of Ring ORAM algorithm

Fig. 3 ABE-M-ORAM system model

Tab. 1 Average user access time comparison of ABE-M-ORAM scheme and improved Ring ORAM scheme

访问用户数	ABE-M-ORAM方案	改进Ring ORAM方案
2	0.268 9	0.381 7
4	0.271 2	0.514 7
6	0.270 5	0.843 8
8	0.267 9	1.116 5
10	0.275 8	1.354 2

Tab. 2 Average user single access time comparison of ABE-M-ORAM scheme and serial anonymous device based ORAM scheme

访问次数	ABE-M-ORAM方案	基于串联匿名器的ORAM方案
100	2.689	2.738
200	2.702	2.954
300	2.699	3.319
400	2.717	3.966
500	2.721	4.704

Tab. 3 Average user access time comparison of ARE-M-ORAM scheme and BTS-M-ORAM scheme

访问用户数	ABE-M-ORAM方案	BTS-M-ORAM方案
2	0.268 9	0.401 2
4	0.271 2	0.524 5
6	0.270 5	0.660 2
8	0.267 9	0.814 7
10	0.275 8	0.974 4

References 22

1	李树凤. 抗访问模式泄露的ORAM技术研究［D］. 济南：山东大学， 2016： 9-22. 10.22209/ic.v61n1a02
	LI S F. Research on ORAM technique to protect data acess pattern［D］. Jinan： Shandong University， 2016： 9-22. 10.22209/ic.v61n1a02
2	STEFANOV E， SHI E， SONG D. Towards practical oblivious RAM［EB/OL］. ［2019-02-12］..
3	SHI E， CHAN T H H， STEFANOV E， et al. Oblivious RAM with O（（log N）³） worst-case cost［C］// Proceedings of the 2011 International Conference on the Theory and Application of Cryptology and Information Security， LNCS7073. Berlin： Springer， 2011：197-214..
4	ZAHUR S， WANG X， RAYKOVA M， et al. Revisiting square-root ORAM： efficient random access in multi-party computation［C］// Proceedings of the 2016 IEEE Symposium on Security and Privacy. Piscataway： IEEE， 2016：218-234. 10.1109/sp.2016.21
5	ZHANG J， MA Q， ZHANG W， et al. TSKT-ORAM： a two-server k-ary tree ORAM for access pattern protection in cloud storage［C］// Proceedings of the 2016 IEEE Military Communications Conference. Piscataway： IEEE， 2016：527-532. 10.1109/milcom.2016.7795381
6	BINDSCHAEDLER V， NAVEED M， PAN X， et al. Practicing oblivious access on cloud storage： the gap， the fallacy， and the new way forward［C］// Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security. New York： ACM， 2015：837-849. 10.1145/2810103.2813649
7	LIU Z， HUANG Y， LI J， et al. DivORAM： towards a practical oblivious RAM with variable block size［J］. Information Sciences， 2018， 447：1-11. 10.1016/j.ins.2018.02.071
8	苑丹丹. 基于ORAM的隐私保护数据共享方案研究［D］. 济南：山东大学， 2018： 12-32. 10.1016/j.jisa.2018.01.002
	YUAN D D. Research on data sharing scheme of privacy protection based on ORAM［D］. Jinan： Shandong University， 2018： 12-32. 10.1016/j.jisa.2018.01.002
9	熊露. 基于属性加密的访问结构隐藏技术研究［D］. 成都：西南交通大学， 2018： 15-19.
	XIONG L. Research of the access structure hiding technology based on attribute encryption［D］. Chengdu： Southwest Jiaotong University， 2018： 15-19.
10	ZHANG J， ZHANG W， QIAO D. A multi-user oblivious RAM for outsourced data［R］. Iowa State University， 2014. 10.1145/2590296.2590323
11	史慧丽. 基于属性的云存储访问控制机制研究［D］. 重庆：重庆邮电大学， 2016： 22-26.
	SHI H L. Research on access control mechanism of cloud storage based on attribute［D］. Chongqing： Chongqing University of Posts and Telecommunications， 2016： 22-26.
12	刘秀彬. 基于云计算的属性加密访问控制研究［J］. 无线互联科技， 2017（12）：30-31. 10.3969/j.issn.1672-6944.2017.12.014
	LIU X B. Research on attribute encryption access control based on cloud computing［J］. Wireless Internet Technology， 2017（12）：30-31. 10.3969/j.issn.1672-6944.2017.12.014
13	BETHENCOURT J， SAHAI A， WATERS B. Ciphertext-policy attribute-based encryption［C］// Proceedings of the 2007 IEEE Symposium on Security and Privacy. Piscataway： IEEE， 2007；321-334. 10.1109/sp.2007.11
14	SAHAI A， WATERS B. Fuzzy identity-based encryption［C］// Proceedings of the 2005 Annual International Conference on the Theory and Applications of Cryptographic Techniques， LNCS3494. Berlin： Springer， 2005： 457-473.
15	GOYAL V， PANDEY O， SAHAI A， et al. Attribute-based encryption for fine-grained access control of encrypted data［C］// Proceedings of the 13th ACM Conference on Computer and Communications Security. New York： ACM， 2006：89-98. 10.1145/1180405.1180418
16	REN L， FLETCHER C， KWON A， et al. Constants count： practical improvements to oblivious RAM［C］// Proceedings of the 24th USENIX Security Symposium. Berkeley， CA： USENIX Association， 2015：415-430. 10.1145/2749469.2750413
17	DAUTRICH J， STEFANOV E， SHI E. Burst ORAM： minimizing ORAM response times for bursty access patterns［C］// Proceedings of the 23rd USENIX Security Symposium. Berkeley： USENIX Association， 2014： 749-764. 10.1145/2699026.2699117
18	MAAS M， LOVE E， STEFANOV E， et al. PHANTOM： practical oblivious computation in a secure processor［C］// Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security. New York： ACM， 2013：311-324. 10.1145/2508859.2516692
19	张少波，王国军，刘琴，等. 基于多匿名器的轨迹隐私保护方法［J］. 计算机研究与发展， 2019， 56（3）：576-584. 10.7544/issn1000-1239.2019.20180033
	ZHANG S B， WANG G J， LIU Q， et al. Trajectory privacy protection method based on multi-anonymizer［J］. Journal of Computer Research and Development， 2019， 56（3）： 576-584. 10.7544/issn1000-1239.2019.20180033
20	NAKAMURA Y， SAWAGUCHI S， NISHI H. Implementation and evaluation of an FPGA-based network data anonymizer［J］. IEEJ Transactions on Electrical and Electronic Engineering， 2017， 12（S1）： S134-S140. 10.1002/tee.22426
21	孙晓妮，蒋瀚，徐秋亮. 基于二叉树存储的多用户ORAM方案［J］. 软件学报， 2016， 27 （6）：1475-1486. 10.12792/iciae2016.031
	SUN X N， JIANG H， XU Q L. Multi-user binary tree based ORAM scheme［J］. Journal of Software， 2016， 27（6）： 1475-1486. 10.12792/iciae2016.031
22	吴杰铭. 基于属性加密算法的云存储研究［D］. 深圳：深圳大学， 2017： 14-22. 10.3724/sp.j.1249.2017.02165
	WU J M. Research on cloud storage based on attribute encryption algorithm［D］. Shenzhen： Shenzhen University， 2017： 14-22. 10.3724/sp.j.1249.2017.02165

[1]	GE Jihong, SHEN Tao. Energy data access control method based on blockchain [J]. Journal of Computer Applications, 2021, 41(9): 2615-2622.
[2]	DU Xinyu, WANG Huaqun. Dynamic group based effective identity authentication and key agreement scheme in LTE-A networks [J]. Journal of Computer Applications, 2021, 41(6): 1715-1722.
[3]	GE Lina, HU Yugu, ZHANG Guifen, CHEN Yuanyuan. Reverse hybrid access control scheme based on object attribute matching in cloud computing environment [J]. Journal of Computer Applications, 2021, 41(6): 1604-1610.
[4]	BAO Yulong, ZHU Xueyang, ZHANG Wenhui, SUN Pengfei, ZHAO Yingqi. Formal verification of smart contract for access control in IoT applications [J]. Journal of Computer Applications, 2021, 41(4): 930-938.
[5]	Li LI, Hongfei YANG, Xiuze DONG. Hierarchical file access control scheme with identity-based multi-conditional proxy re-encryption [J]. Journal of Computer Applications, 2021, 41(11): 3251-3256.
[6]	WANG Haiyong, PAN Qiqing, GUO Kaixuan. Access control model based on blockchain and user credit [J]. Journal of Computer Applications, 2020, 40(6): 1674-1679.
[7]	SHI Jinshan, LI Ru, SONG Tingting. Blockchain-based access control framework for Internet of things [J]. Journal of Computer Applications, 2020, 40(4): 931-941.
[8]	WANG Haiyong, PENG Yao, GUO Kaixuan. CP-ABE access control scheme based on proxy re-encryption in cloud storage [J]. Journal of Computer Applications, 2019, 39(9): 2611-2616.
[9]	GAO Shijuan, WANG Xijun, ZHU Qingchao. Design of optimization algorithm for selfish misbehavior in medium access control protocol of mobile Ad Hoc network [J]. Journal of Computer Applications, 2019, 39(6): 1786-1791.
[10]	WANG Yaqiong, SHI Guozhen, XIE Rongna, LI Fenghua, WANG Yazhe. Multi-authority access control scheme with policy hiding of satellite network [J]. Journal of Computer Applications, 2019, 39(2): 470-475.
[11]	LUO Xiaofeng, YANG Xingchun, HU Yong. Improved decision diagram for attribute-based access control policy evaluation and management [J]. Journal of Computer Applications, 2019, 39(12): 3569-3574.
[12]	CAO Zhenhuan, CAI Xiaohai, GU Menghe, GU Xiaozhuo, LI Xiaowei. Android permission management and control scheme based on access control list mechanism [J]. Journal of Computer Applications, 2019, 39(11): 3316-3322.
[13]	GAO Shijuan, TAN Tongde, ZHU Qingchao. Cognitive medium access control protocol optimization design for distributed multi-hop network using single transceiver [J]. Journal of Computer Applications, 2018, 38(9): 2616-2620.
[14]	YANG Hongyu, NING Yuguang. Adaptive weight allocation method of risk assessment index for access control of cloud platform [J]. Journal of Computer Applications, 2018, 38(6): 1614-1619.
[15]	ZHOU Xun, ZHOU Haidong, REN Zhi, ZOU Mingrui, LI Guangbin. Efficient and fast dual-channel MAC protocol for terahertz wireless personal area networks [J]. Journal of Computer Applications, 2018, 38(5): 1436-1441.

Multi-user sharing ORAM scheme based on attribute encryption

基于属性加密的多用户共享ORAM方案

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 6

References 22

Related Articles 15

Recommended Articles

Metrics