可追踪并撤销叛徒的属性基加密方案  

An Attribute-Based Encryption Scheme for Traitor Tracing and Revocation Together

作　　者：马海英[1,2,3] 曾国荪[1,2] 

机构地区：[1]同济大学计算机科学与技术系,上海201804 [2]嵌入式系统与服务计算教育部重点实验室,上海201804 [3]南通大学计算机科学与技术学院,江苏南通226019

出　　处：《计算机学报》2012年第9期1845-1855,共11页Chinese Journal of Computers

基　　金：国家"八六三"高技术研究发展计划项目基金(2007AA01Z425;2009AA012201);国家自然科学基金(61103068);NSFC-微软亚洲研究院联合资助项目(60970155);上海市优秀学科带头人计划项目(10XD1404400);教育部博士点基金(20090072110035);教育部网络时代的科技论文快速共享专项研究课题(20110740001)资助~~

摘　　要：属性基加密(ABE)是一种有效地对加密数据实现细粒度访问控制的密码学体制.在ABE系统中,存在恶意用户(或叛徒)泄露私钥生成盗版解码器,并将其分发给非法用户的问题.现有的解决方案仅能追查到密钥泄漏者的身份,但不能将其从ABE系统中撤销.文中提出了一种既可追踪又可撤销叛徒的属性基加密方案(ABTR).首先,给出一个具有扩展通配符的属性基加密方案(GWABE),基于3个3素数子群判定假设,采用双系统加密方法证明该GWABE方案是完全安全的.然后,利用完全子树构架将GWABE转化成ABTR方案,并证明该ABTR方案是完全安全的,且用户私钥长度是固定的.而此前的可追踪叛徒的ABE方案仅满足选择安全性.Attribute based encryption （ABE） is an effective cryptographic primitive for achieving fine-grained access control of encrypted data. A well-known concern in the ABE system is that malicious users （or traitors） leak their private keys to construct pirate decryption devices and dis- tribute them to illegal users. The existing solutions can only trace the idewfities of users who leaked their keys, but they can not revoke the leaked keys from the ABE system. This paper pro- poses an attribute-based encryption scheme for traitor tracing and revocation together （ABTR）. We first introduce an ABE scheme with generalized wildcards （GWABE）. Under three assump- tions of the subgroup decision problem for 3 primes （3P-SDP）, we prove that the GWABE scheme is fully secure by using the dual system encryption method. Then we transform the GWABE scheme into an ABTR scheme by using the complete subtree framework. The ABTR scheme is proved to be fully secure, and provides the nice feature of having constant private key size. However, the previous ABE schemes for traitor tracing were only proved secure in the selective model.

关 键 词：属性基加密 访问控制 完全子树框架 叛徒追踪 撤销 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]