Anonymous privacy-preserving scheme for cloud storage based on CP_ABE

doi:10.11772/j.issn.1001-9081.2015.06.1573

Abstract

Abstract:

In order to solve the confidentiality issues such as key exposure and attribute revocation of data stored in cloud server, an advanced anonymous privacy-preserving scheme based on Ciphertext-Policy Attributed-Based Encryption (CP_ABE) was proposed by considering confidentiality of data storage and indistinguishability of access. First, the scheme constructed a forward-secure irreversible key-update algorithm to solve key exposure. On the basis of the classified user-group and the advanced Subset-Difference algorithm, fine-grained attribute revocation was implemented with the help of cloud data re-encryption algorithm. The potential interests of user would be concealed when k-anonymity l-diversity data request was introduced based on the homomorphic encryption algorithm. The backward-security of key exposure was realized on the basis of secondary encryption inserted in data response. Under the l-Bilinear Diffie-Hellman Exponent Problem (l-BDHE) assumption, selective security of the proposed scheme was proved in the standard model. The performance advantage of the proposed scheme was demonstrated respectively in terms of efficiency, key length and security.

Key words: Ciphertext-Policy Attributed-Based Encryption (CP_ABE), provable security, re-encryption, key exposure, attribute revocation

摘要：

针对云存储中数据机密性问题,为解决密钥泄漏与属性撤销问题,从数据的机密性存储以及访问的不可区分性两个方面设计了基于密文策略属性加密体制(CP_ABE)的匿名云存储隐私保护方案。提出了关于密钥泄漏的前向安全的不可逆密钥更新算法;在层次化用户组以及改进的Subset-Difference算法基础上,利用云端数据重加密算法实现属性的细粒度撤销;基于同态加密算法实现k匿名l多样性数据请求,隐藏用户潜在兴趣,并在数据应答中插入数据的二次加密,满足关于密钥泄漏的后向安全。在标准安全模型下,基于l阶双线性Diffie-Hellman(判定性l-BDHE)假设给出所提出方案的选择性安全证明,并分别从计算开销、密钥长度以及安全性等方面验证了方案的性能优势。

关键词: 密文策略基于属性加密体制, 可证明安全, 重加密, 密钥泄漏, 属性撤销

CLC Number:

TP309

XU Qian, TAN Chengxiang. Anonymous privacy-preserving scheme for cloud storage based on CP_ABE[J]. Journal of Computer Applications, 2015, 35(6): 1573-1579.

徐潜, 谭成翔. 基于密文策略属性加密体制的匿名云存储隐私保护方案[J]. 计算机应用, 2015, 35(6): 1573-1579.

References

[1] SAHAI A, WATERS B. Fuzzy identity based encryption [C]//Proceedings of 2005 24th Annual International Conference on the Theory and Applications of Cryptographic Techniques. Berlin: Springer-Verlag, 2005: 457-473.
[2] GOYAL V, PANDEY O, SAHAI A, et al. Attribute-based encryption for fine-grained access control of encrypted data [C]//Proceedings of the 13th ACM Conference on Computer and Communications Security. New York: ACM, 2006: 89-98.
[3] TANG Y, LEE P, LIU J, et al. Secure overlay cloud storage with access control and assured deletion [J]. IEEE Transactions on Dependable and Secure Computing, 2012, 9(6):903-916.
[4] HONG C, ZHANG M, FENG D. AB-ACCS: a cryptographic access control scheme for cloud storage [J]. Journal of Computer Research and Development, 2010, 47(Z1): 259-265.(洪澄, 张敏, 冯登国.AB-ACCS:一种云存储密文访问控制方法[J].计算机研究与发展, 2010, 47(Z1):259-265.)
[5] HONG C, ZHANG M, FENG D. Achieving efficient dynamic cryptographic access control in cloud storage [J]. Journal on Communications, 2011, 32(7): 125-132.(洪澄, 张敏, 冯登国.面向云存储的高效动态密文访问控制方法[J].通信学报, 2011, 32(7):125-132.)
[6] WEI J, LIU W, HU X. Forward-secure ciphertext-policy attribute-based encryption scheme [J]. Journal on Communications, 2014, 35(7): 38-45.(魏江宏, 刘文芬, 胡学先.前向安全的密文策略基于属性加密方案[J].通信学报, 2014, 35(7):38-45.)
[7] WANG P, FENG D, ZHANG L. CP-ABE scheme supporting fully fine-grained attribute revocation [J]. Journal of Software, 2012, 23(10): 2805-2816.(王鹏翩, 冯登国, 张立武.一种支持完全细粒度属性撤销的CP-ABE方案[J].软件学报, 2012, 23(10):2805-2816.)
[8] YU S, WANG C, REN K, et al. Achieving secure, scalable and fine-grained data access control in cloud computing [C]//Proceedings of the 2010 INFOCOM. Piscataway: IEEE, 2010: 1-9.
[9] HUR J, NOH D K. Attribute-based access control with efficient revocation in data outsourcing systems [J]. IEEE Transactions on Parallel and Distributed Systems, 2011, 22(7): 1214-1221.
[10] ATTRAPADUNG N, IMAI H. Conjunctive broadcast and attribute-based encryption [C]//Proceedings of the Third International Conference on Pairing-Based Cryptography — Pairing 2009, LNCS 5671. Berlin: Springer, 2009: 248-265
[11] WAN Z, LIU J, DENG R H. HASBE: a hierarchical attribute-based solution for flexible and scalable access control in cloud computing [J]. IEEE Transactions on Information Forensics and Security, 2012, 7(2): 743-754.
[12] SAHAI A, SEYALIOGLU H, WATERS B, et al. Dynamic credentials and ciphertext delegation for attribute-based encryption [C]//Proceedings of the 32nd Annual Cryptology Conference on Advances in Cryptology — CRYPTO 2012, LNCS 7417. Berlin: Springer, 2012: 199-217.
[13] LU R, LIN X, SHI Z, et al. PLAM: A privacy-preserving framework for local-area mobile social networks [C]//Proceedings of the INFOCOM 2014. Piscataway: IEEE, 2014: 763-771.
[14] NAOR D, NAOR M, LOTSPIECH J. Revocation and tracing schemes for stateless receivers [C]//Proceedings of the 21st Annual International Cryptology Conference on Advances in Cryptology — CRYPTO 2001, LNCS 2139. Berlin: Springer, 2001: 41-62.

[1]	Xin ZHANG, Jinquan ZHANG, Deyuan LIU, Wunan WAN, Shibin ZHANG, Zhi QIN. Cross-chain identity management scheme based on identity-based proxy re-encryption [J]. Journal of Computer Applications, 2024, 44(12): 3723-3730.
[2]	Haiying MA, Jinzhou LI, Jikun YANG. Blockchain-based decentralized attribute-based encryption scheme for revocable attributes [J]. Journal of Computer Applications, 2023, 43(9): 2789-2797.
[3]	Guishuang XU, Xinchun YIN. Certificateless conditional privacy-preserving authentication scheme for VANET [J]. Journal of Computer Applications, 2023, 43(11): 3358-3367.
[4]	ZHAO Hong, YU Shuhan, HAN Yanyan, LI Zhaobin. Analysis and improvement of certificateless signature scheme [J]. Journal of Computer Applications, 2023, 43(1): 147-153.
[5]	Jingyu SUN, Jiayu ZHU, Ziqiang TIAN, Guozhen SHI, Chuanjiang GUAN. Attribute based encryption scheme based on elliptic curve cryptography and supporting revocation [J]. Journal of Computer Applications, 2022, 42(7): 2094-2103.
[6]	GU Zhengchuan, GUO Yuanbo, FANG Chen. End-to-end security solution for message queue telemetry transport protocol based on proxy re-encryption [J]. Journal of Computer Applications, 2021, 41(5): 1378-1385.
[7]	ZHANG Lihua, WANG Xinyi, HU Fangzhou, HUANG Yang, BAI Jiayi. Data sharing model of smart grid based on double consortium blockchains [J]. Journal of Computer Applications, 2021, 41(4): 963-969.
[8]	Li LI, Hongfei YANG, Xiuze DONG. Hierarchical file access control scheme with identity-based multi-conditional proxy re-encryption [J]. Journal of Computer Applications, 2021, 41(11): 3251-3256.
[9]	LUO Wenjun, WEN Shenglian, CHENG Yu. Blockchain-based electronic health record sharing scheme [J]. Journal of Computer Applications, 2020, 40(1): 157-161.
[10]	WANG Haiyong, PENG Yao, GUO Kaixuan. CP-ABE access control scheme based on proxy re-encryption in cloud storage [J]. Journal of Computer Applications, 2019, 39(9): 2611-2616.
[11]	LIU Yudong, WANG Xu'an, TU Guangsheng, WANG Han. Cloud outsourcing data secure auditing protocol throughout whole lifecycle [J]. Journal of Computer Applications, 2019, 39(7): 1954-1958.
[12]	MING Yang, HE Baokang. Attribute revocation and verifiable outsourcing supported multi-authority attribute-based encryption scheme [J]. Journal of Computer Applications, 2019, 39(12): 3556-3562.
[13]	ZHANG En, JIN Ganggang. Cloud outsourcing multiparty private set intersection protocol based on homomorphic encryption and Bloom filter [J]. Journal of Computer Applications, 2018, 38(8): 2256-2260.
[14]	WANG Jingwei, YIN Xinchun. Ciphertext policy attribute-based encryption scheme with weighted attribute revocation [J]. Journal of Computer Applications, 2017, 37(12): 3423-3429.
[15]	HAO Wei, YANG Xiaoyuan, WANG Xu'an, WU Liqiang. Proxy re-encryption scheme based on conditional asymmetric cross-cryptosystem [J]. Journal of Computer Applications, 2016, 36(9): 2452-2458.