支持安全外包计算的无线体域网数据共享方案  

Data sharing scheme supporting secure outsourced computation in wireless body area network

作　　者：张维纬[1,2] 张育钊[1,2] 黄焯[1,2] 张茹[3] 杨义先[3] ZHANG Wei-wei ZHANG Yu-zhao HUANG Chao ZHANG Ru YANG Yi-xian(College of Engineering, Huaqiao University, Quanzhou 362021, China Fujian Provincial Academic Engineering Research Centre in Industrial Intellectual Techniques and Systems, Quanzhou 362021, China Information Security Center, Beijing University of Posts and Telecommunications, Beijing 100876, China)

机构地区：[1]华侨大学工学院,福建泉州362021 [2]工业智能化技术与系统福建省高校工程研究中心,福建泉州362021 [3]北京邮电大学信息安全中心,北京100876

出　　处：《通信学报》2017年第4期64-75,共12页Journal on Communications

基　　金：华侨大学科研基金资助项目(No.13BS415);泉州市科技计划基金资助项目(No.2014Z112);福建省自然科学基金资助项目(No.2015J05125);国家自然科学基金资助项目(No.61372107)~~

摘　　要：如何有效保护无线体域网(WBAN)中数据共享时的数据安全是一个亟待解决的关键问题。传统的CP-ABE机制具有"一对多"的数据安全通信功能,适用于WBAN中的访问控制,但运算复杂度高且不支持属性撤销。充分考虑WBAN节点资源的有限性和用户属性的动态性,提出一种在标准模型下CPA安全、支持属性撤销、加密和解密安全外包计算的CP-ABE方案。与已有的方案相比,提出的方案在保证安全性的同时,终端的运算负担大为减少,且可以实时、细粒度地撤销用户属性。How to effectively protect the security of data sharing in WBAN was a key problem to be solved urgently. The traditional CP-ABE mechanism had a ＂one to many＂ data security communication function which was suitable for access control in WBAN, but it had high computational complexity and did not support attribute revocation. Fully considering of limitations on computation and storage of sensor nodes and dynamic user attribute in WBAN, a CP-ABE scheme was proposed which was provably secure against CPA under the standard model and supported attributes revocation, outsourced encryption and decryption. Compared with the proposed schemes, the computation burden on senor nodes is greatly reduced and the user＇s attribution can be revoked immediately and fine grained while meeting the demand of its security in the proposed scheme.

关 键 词：无线体域网 安全共享 外包计算 属性基加密 属性撤销 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]