隐私保护的可验证外包属性基解密方案  

Efficient Verifiable Outsourcing Decryption ABE with Privacy-preserving Policy

作　　者：李聪 杨晓元[1,2] 王绪安[1,2] LI Cong;YANG Xiao-yuan;WANG Xu-an(Key Laboratory for Network and Information Security of Chinese Armed Police Force,Engineering University of Chinese Armed Police Force,Xi＇an 710086,China;College of Cryptographic Engineering,Engineering University of the Chinese Armed Police Force,Xi＇an 710086,China)

机构地区：[1]武警工程大学网络与信息安全武警部队重点实验室,西安710086 [2]武警工程大学密码工程学院,西安710086

出　　处：《小型微型计算机系统》2018年第9期1993-1997,共5页Journal of Chinese Computer Systems

基　　金：国家自然科学基金项目(U1636114;61572521)资助;国家重点研发计划项目(2017YFB0802002)资助;陕西省自然科学基础研究计划项目(2016JQ6037)资助

摘　　要：传统CP-ABE的访问控制方案,存在两个问题:由于访问策略的公开性,可能会泄露用户隐私;在进行计算外包密钥时,计算量随着属性个数而线性增加.本文提出可验证外包解密的策略隐私保护的访问控制方案,利用属性布鲁姆过滤器,隐藏属性与矩阵的映射关系,实现完全隐藏访问策略;同时设计有效外包密钥生成算法,外包密钥生成中模指数运算降低至固定常数,对转换密文的正确性进行验证,确保转换密文未被非法替换,解决了上述两个问题.The traditional access control for CP-ABE,there are two problems：the open access policy may disclose user privacy;when calculating the outsourcing key,the amount of computation increases linearly with the number of attributes.This paper propose an access control scheme which can be used to verify the decryption and protect policy privacy.By using the attribute Bloom filter to hide the mapping relation between the attributes and the matrix,a completely hidden access policy is implemented;meanwhile,the effective outsourcing key generation algorithm is designed,and the modulus index operation is reduced to fixed constant in the outsourcing key generation,In order to prevent the malicious attacks on the cloud,the correctness of the converted ciphertext is verified to ensure that the converted ciphertext has not been illegally replaced.the above two problems are solved.

关 键 词：访问控制 隐私保护策略 属性布鲁姆过滤器 外包解密 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]