基于同态加密的可验证隐私数据聚合方案  

A Verifiable Private Data Aggregation Scheme Based on Homomorphic Encryption

作　　者：王会勇[1,2] 冯勇[3] 

机构地区：[1]中国科学院成都计算机应用研究所自动推理与认知实验室,四川成都610041 [2]桂林电子科技大学数学与计算科学学院,广西桂林541004 [3]中国科学院重庆绿色智能技术研究院自动推理与认知重庆市重点实验室,重庆400714

出　　处：《四川大学学报（工程科学版）》2016年第4期144-149,共6页Journal of Sichuan University (Engineering Science Edition)

基　　金：国家重点基础研究发展计划资助项目(2011CB302400);国家自然科学基金资助项目(61363069);广西自然科学基金资助项目(61462017;2014GXNSFAA118364);广西研究生教育创新计划资助项目(XJYC2012020)

摘　　要：为克服传统无线传感器网络数据聚合方案在数据保密计算、防止抵赖、抵御内部和外部攻击、追查并修复错误等方面的性能及安全性与效率上的不足,构造一个基于数字签名和同态加密技术的可验证隐私数据聚合方案。采用El Gamal加密方案作为基础方案对隐私数据加密,并将传感器节点身份信息加入数字签名,使来自不同节点的数据具有可辨识性,从而使方案具备了验证数据及追查并修复错误的能力。采用保密干扰因子方法,使方案能够抵御内部攻击,并利用一类具有同态加性质的保密求和算法构造一种不需要可信第三方的保密干扰因子生成方法,从而避免了引入可信第三方及由此带来的安全性与效率问题。给出方案的安全性证明和效率分析,并与一些典型方案进行对比。分析结果表明,本文方案是安全的,且整体性能优于已有方案。In order to overcome the drawbacks of most existing data aggregating schemes for wireless sensor networks （WSN） and provide capabilities of data privacy, unforgeability, defending external and internal attacks, tracing and fixing data mistakes, as well as better security and efficiency, a verifiable data aggregation scheme using homomorphic encryption （HE） techniques was proposed, in which sensors＇ identities were included in digital signatures to achieve data distinguishability, so as to provide the proposed scheme with functions of data verification, tracing and modification. The E1Gamal cryptosystem was adopted as a basic scheme to encrypt confidential da- ta. Blinding factors were introduced to provide the scheme with defense capability against internal attacks. Using a kind of multiplica- tivelly homomorphic secure summation algorithm, a blinding factor generating method which avoids the need for a trusted third party （TTP） was proposed to avoid possible risks introduced by using of TIP. The security and efficiency analysis, as well as comparisons with some classical schemes showed that the proposed scheme is secure and the overall performance is better than the existing schemes.

关 键 词：数据聚合 同态加密 数字签名 可信第三方 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]