分层认证机构的属性基加密方案  

Hierarchical Authority Attribute-Based Encryption

作　　者：艾倩颖 童丹[1] 王志学[1] 刘建伟[1] 

机构地区：[1]北京航空航天大学电子信息工程学院,北京100191

出　　处：《武汉大学学报（理学版）》2014年第5期441-446,共6页Journal of Wuhan University:Natural Science Edition

基　　金：国家自然科学基金资助项目(61272501);国家重点基础研究发展计划(973)项目(2012CB315905)

摘　　要：在密文策略的属性基加密(CP-ABE,ciphertext-policy attribute-based encryption)的基础上,使用分层的多个认证机构为用户分发私钥,一方面避免了单一认证机构形式带来的服务器负荷运行等问题,另一方面便于中央授权机构对其进行管理.另外,中央授权机构无法恢复用户的个人信息轮廓,保护了用户的隐私;用户的私钥由对应的认证机构根据随机数进行提取,中央授权机构无法获知,保护了用户私钥的安全性;在私钥提取的过程中,允许用户的属性集合之间存在重叠.该方案在判定双线性Diffie-Hellman(DBDH,decisional bilinear DiffieHellman)假设下满足IND-Set-CPA(against adaptive chosen attribute set and chosen plaintext attack)安全.Based on ciphertext-policy attribute-based encryption （CP-ABE）, more than one authorities were used to distribute private keys to users, and these authorities were organized in hierarchy. This scheme can not only avoid problems such as the central server＇s overload operation caused by single-authority ABE, and also make CA＇s management more efficient. Meanwhile, CA can not recover users＇ profiles, and their privacy is protected l authorities compute private keys for users according to their random numbers, which is unobtainable for CA, and users＇ security is protected. In addition, different users＇ attributes are allowed to overlap in terms of the extraction of private keys. This scheme is against Adaptive Chosen Attribute Set and Chosen Plaintext Attack （IND-Set-CPA）, assuming the difficulty of the decisional bilinear Diffie-Hellman （DBDH） problem.

关 键 词：属性基加密 分层认证机构的属性基加密 双线性映射 安全性分析 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]