对类型可修改的基于身份代理重加密方案的改进  

Further Improvement of a Dynamic Type and Identity-Based Proxy Re-Encryption Scheme

作　　者：张新鹏[1,2] 许春香[1] 张晓均[1] 邓江[1] 黄新[2] 

机构地区：[1]电子科技大学计算机科学与工程学院,成都611731 [2]成都军区联勤部信息中心,成都610015

出　　处：《电子科技大学学报》2016年第6期964-968,共5页Journal of University of Electronic Science and Technology of China

基　　金：国家自然科学基金(61370203);总后研究所项目(BS211L019-3)

摘　　要：类型可修改的基于身份的代理重加密方案不仅具有传统代理重加密方案的核心功能,而且密文的拥有者可以随时修改密文的类型信息,能够满足实际云存储应用中,密文类型信息需要动态转换的应用场景。对类型可修改的基于身份代理重加密方案进行分析,发现该方案存在2个安全漏洞:1)类型修改缺乏验证,攻击者可以随意修改类型标记;2)类型修改引起了新的条件性选择明文攻击问题。在分析这两个安全漏洞的基础上,提出了改进方案,并给出了安全性分析。Dynamic type information of ciphertext can be modified properly so that it can be well applied in a practical cloud storage environment. In order to meet the application requirements, Liu et al proposed a dynamic type and identity-based proxy re-encryption （PRE） scheme based on Ibraimi et al＇s scheme. Their scheme not only keeps the traditional core function of PRE scheme, but also makes sure that the owner of ciphertext can modify the type information at any time. However, after careful security analysis it found that Liu et al.＇s scheme has two security flaws. Firstly, the dynamic type information lacks of verification, the adversary can modify the type tag. Secondly, the dynamic type information causes a conditional chosen plaintext attack. Thus we further improve Liu et al.＇s scheme and give the security analysis.

关 键 词：云存储 可证明安全性 代理重加密 基于类型和身份的代理重加密 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]