支持叛逆者追踪的密文策略属性基加密方案  

Ciphertext Policy Attribute-based Encryption Scheme Supporting Traitor Tracing

作　　者：闫玺玺[1] 张棋超 汤永利[1] 黄勤龙 YAN Xixi;ZHANG Qichao;TANG Yongli;HUANG Qinlong(School of Computer Science and Technology, Henan Polytechnic University,Jiaozuo Henan 454003, China;School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing 100876, China)

机构地区：[1]河南理工大学计算机科学与技术学院,河南焦作454003 [2]北京邮电大学网络空间安全学院,北京100876

出　　处：《信息网络安全》2019年第5期47-53,共7页Netinfo Security

基　　金："十三五"国家密码发展基金[MMJJ20170122];河南省科技厅项目[142300410147];河南省教育厅项目[12A520021;16A520013];河南理工大学博士基金[B2014-044];河南理工大学青年骨干教师资助项目

摘　　要：属性基加密通过访问结构与属性集之间的匹配关系实现对用户解密权限的控制,高效地解决了"一对多"的秘密数据共享问题,在云计算、大数据、隐私保护等领域有着广泛的应用前景。然而,实际应用中存在叛逆者(或恶意用户)泄露私钥获取非法利益的情况。针对此问题,文章提出一种支持叛逆者追踪的密文策略属性基加密方案。该方案基于IBRAIMI等人提出的ABE方案,在私钥生成算法中融入Boneh-Boyen签名算法,实现对叛逆者的追踪。该方案被证明在DBDH假设下满足选择明文攻击安全。通过性能分析发现,该方案密文长度、私钥长度都得到了缩短,降低了计算开销和通信开销。因此,该方案在文件共享、电子病历等方面具有较大的理论意义和应用价值。Attribute-based encryption(ABE) which can realize fine-grained access control by matching the access structure with attribute set meets the demand of secret data sharing in "one-to-many" environment. So it is widely used in the field of cloud computing, big data, privacy protection and so on. However, there are cases in which a traitor(or a malicious user) leaks a private key to obtain an illegal benefit in practical use. To solve this problem, a ciphertext policy attribute-based encryption scheme supporting traitor tracing is proposed in the paper. Based on the ABE scheme proposed by IBRAIMI, the Boneh-Boyen signature algorithm is introduced in the private key generation algorithm to track the traitor. The scheme is proved to be secure against chosen plaintext attack under DBDH assumption. The performance analysis shows that the size of the ciphertext and the private key are reduced, and the cost of computation and communication are optimized. Therefore, the scheme has higher theoretical significance and application values in file sharing, electronic medical records, and so on.

关 键 词：属性基加密 叛逆者追踪 密文策略 DBDH假设 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]