一种实现一般电路的密钥策略的属性加密方案  

Key-Policy Attribute-Based Encryption Scheme for General Circuits

作　　者：胡鹏[1] 高海英[1] 

机构地区：[1]信息工程大学,河南郑州450001

出　　处：《软件学报》2016年第6期1498-1510,共13页Journal of Software

基　　金：国家自然科学基金(61272488);信息保障技术重点实验室资助项目(KJ-15-006)~~

摘　　要：属性加密方案中引入访问结构,实现了用户对密文细粒度的访问控制.任意访问结构都可以通过一般电路来实现,因此,设计实现一般电路访问结构的属性加密方案是该领域的研究热点和难点.Garg等人基于多线性映射首次提出了实现一般电路访问结构的属性加密方案,但该方案支持的电路是受限的,电路节点只能逐层输出,系统中实现的访问结构的电路深度都是固定值l.为了解决电路受限的问题,提出了一种实现一般电路的密钥策略的属性加密方案.在私钥生成算法中,通过对电路进行等价转换,引入转换密钥,实现了任意深度大于1、小于等于l的电路访问结构;将电路中非叶子节点的密钥与该节点的两个输入节点的深度相关,实现了节点的跨层输入.基于k-多线性判定性Diffie-Hellman(K-MDDH)假设证明了该方案具有选择安全性.Through introducing the access structure into attribute-based encryption, users can achieve the fine-grained access control to the ciphertext. Any access structure can be realized by general circuit. Therefore, designing attribute-based encryption for general circuit is difficult in this field. Garg etc. presented the first general circuit access structure based on multilinear maps. However the usability of the access structures is rather limited as gate can only output layer by layer and the depth of the circuit are fixed in l. In order to solve this limitation, this paper proposes a key-policy attribute-based encryption scheme for general circuits based on the Garg＇s scheme. In key generation step, the new scheme implements any circuit that depth is greater than 1 and less than or equal to l by equivalent conversion of the circuit and addition of the conversion key. It also achieves cross layer output by adding its child node depth into every non-leaf node＇s key component. Selective security of the proposed scheme in the standard model is proved under the decisional multilinear Diffie-Hellman assumption.

关 键 词：属性加密 多线性映射 一般电路 跨层输入 选择安全 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]