密文策略的属性基并行密钥隔离加密  

Ciphertext Policy Attribute-Based Parallel Key-Insulated Encryption

作　　者：陈剑洪[1,2,3] 陈克非[1,3] 龙宇[1] 万中美[4] 于坤[2] 孙成富[2] 陈礼青[2] 

机构地区：[1]上海交通大学计算机科学与工程系,上海200240 [2]淮阴工学院计算机工程学院,江苏淮安223003 [3]上海市可扩展计算与系统重点实验室(上海交通大学),上海200240 [4]河海大学理学院,江苏南京210098

出　　处：《软件学报》2012年第10期2795-2804,共10页Journal of Software

基　　金：国家自然科学基金(60970111;61133014;60903189;60903020;61103183);淮安市科技支撑计划(工业)(HAG2011044;HAG2011045)

摘　　要：对于公钥密码体制来说,私钥泄漏是一种十分严重的威胁.传统密码系统可以通过撤销公钥来应对私钥泄漏,但在属性基密码系统里,公钥由属性集合表示,对这些属性集合的撤销不太可行.目前,密钥隔离机制是减轻密钥泄漏所带来危害的一种有效方法.为了处理属性基密码系统中的密钥泄露问题,将并行密钥隔离机制引入到密文策略的属性基加密中,提出了密文策略的属性基并行密钥隔离加密(ciphertext policy attribute-based parallel keyinsulated encryption,简称CPABPKIE)的概念.在给出CPABPKIE的形式化定义和安全模型的基础上,构建了一个不需要随机预言机模型的选择ID安全的CPABPKIE方案.所提方案允许较频繁的临时私钥更新,同时可以使协助器密钥泄漏的几率保持较低,因此增强了系统防御密钥泄漏的能力.The key-exposure problem has perhaps been the most devastating attack on a cryptosystem.Conventional public key cryptosystems can revoke public keys in the case of key-exposure.However,the public key for an attribute-based scheme represents an attribute set should not be changed.Key-Insulation is a crucial technique for protecting private keys.To deal with the key-exposure problems in an attribute-based cryptosystem,this paper extends the parallel key-insulated mechanism to ciphertext policy attribute-based encryption scenarios and introduces the primitive of ciphertext policy attribute-based parallel key-insulated encryption（CPABPKIE）.After formalizing the definition and security notions for CPABPKIE,a concrete CPABPKIE scheme is presented.The security the proposed CPABPKIE scheme can be proved in the selective-ID model.The new primitive does not increase the risk of helper key-exposure,and allows frequent key updating.

关 键 词：密文策略 属性基 加密 并行密钥隔离 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]