基于属性的BGN型密文解密外包方案  

BGN type outsourcing the decryption of attribute-based encryption ciphertexts

作　　者：李镇林 张薇 白平 王绪安[2] 

机构地区：[1]武警工程大学电子技术系,西安710086 [2]武警工程大学信息安全保密重点实验室,西安710086

出　　处：《计算机应用》2017年第8期2287-2291,共5页journal of Computer Applications

基　　金：陕西省自然科学基金资助项目(2016JQ6037)~~

摘　　要：云计算的安全问题是制约其发展的关键瓶颈,其中对云计算结果的访问控制是当前研究的一个热点。在经典的类同态BGN方案基础上,结合CP-ABE(Ciphertext-Policy Attribute-Based Encryption)型密文解密外包设计,构造了基于属性的BGN型密文解密外包方案,部分密文的解密被外包到云上进行,减小了用户的存储开销与计算开销,并且只有用户属性满足访问策略时,才会得到正确的解密结果。与现有的基于属性的外包方案相比,新方案能对密文进行任意次加法同态和一次乘法同态操作。最后,分析了方案的安全性。所提方案在子群判定问题假设下达到语义安全,在随机预言机模型下满足属性安全。Cloud computing security is the key bottleneck that restricts its development, and access control on the result of cloud computing is a hot spot of current research. Based on the classical homomorphic encryption BGN（ Boneh-GohNissim） scheme, and combined with outsourcing the decryption of Ciphertext-Policy Attribute-Based Encryption（ CP-ABE）ciphertexts, a BGN type outsourcing the decryption of ABE ciphertexts was constructed. In the scheme, partial decryption of ciphertexts was outsourced to the cloud, and only the users whose attributes meet the access policy could get the correct decryption result, thus reducing the storage and computation overhead of users. Compared with the existing outsourcing schemes of ABE, the proposed scheme can operate on ciphertexts for arbitrary additions and one multiplication. Finally, the security of the scheme was analyzed. The proposed scheme is semantically secure under the subgroup decision assumption,and its attribute security is proved under random oracle model.

关 键 词：基于属性的加密 云计算 外包计算 同态加密 子群判定问题 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]