面向移动云存储的属性基解密服务中间件  

Mobile cloud storage-oriented attribute based decryption service middleware

作　　者：蔡孟飞 何倩[1] 程东生[1] 王士成[2] 

机构地区：[1]桂林电子科技大学认知尢线电与信息处理教育部重点实验室,广西桂林541004 [2]中国电子科技集团公司航天信息应用技术重点实验室,石家庄050081

出　　处：《计算机应用》2016年第7期1828-1833,共6页journal of Computer Applications

基　　金：国家自然科学基金资助项目(61201250,61163057,61163058);广西自动检测技术与仪器重点实验室主任基金资助项目(YQ15102);云计算与复杂系统高校重点实验室基金资助项目(14102);中国电子科技集团公司航天信息应用技术重点实验室开放基金资助项目~~

摘　　要：属性基加密(ABE)算法支持对云端数据的细粒度访问控制。针对属性基解密计算复杂度高,难以在资源受限的移动终端上实现的问题,提出并实现了一种面向移动云存储的属性基解密服务中间件。在保证密文信息不被中间件获取的前提下,中间件为移动终端代理属性基解密服务,实现了基于树形结构的线性秘密共享(LSSS)矩阵求解,降低了终端的计算与通信开销,提高了解密速度;属性权威可以在不需要用户参与的条件下,即时、细粒度地撤销用户属性;所有接口均使用Restful服务,保证了通用性。实验结果表明,属性基解密服务中间件提高移动设备解密性能近30倍,具备较好的并发性能,属性撤销具有实用性。The Attribute Based Encryption（ ABE） algorithm can support fine grained access control for cloud data.Concerning the problems that the ABE decryption has huge complexity and is difficult to realize on resource constrained mobile device, a mobile cloud storage-oriented attribute based decryption service middleware was proposed and realized. Without getting the information about the encrypted data, the middleware could delegate the ABE decryption service, a tree-based Linear Secret Sharing Scheme（ LSSS） matrix solution was realized, and so the computation and communication cost of the mobile terminal were decreased. Accordingly, the decryption speed was improved. The attribute authority could revoke the user attributes through this middleware instantly with fine-grained control without involving any users. All the services were defined as Restful interface and then the generality of the middleware was ensured. The experimental results show that the middleware improves attribute based decryption performance nearly 30 times, and it has good parallel performance and practical attribute revoking capability.

关 键 词：属性基加密 数据外包 移动云存储 服务中间件 属性撤销 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP309.2[自动化与计算机技术—计算机科学与技术]