一种支持解密外包的KP-ABE方案  

A KP-ABE Scheme with Outsourced Decryption

作　　者：晋云霞 杨贺昆 冯朝胜[1,2] 刘帅南 李航 邹莉萍 万国根 JIN Yun-xia;YANG He-kun;FENG Chao-sheng;LIU Shuai-nan;LI Hang;ZOU Li-ping(WAN Guo-gen 3(1.College of Computer Science,Sichuan Normal University,Chengdu,Sichuan610101,China;Network and Data Security Key Laboratory of Sichuan Province,University of Electronic Science and Technology of China,Chengdu,Sichuan 610054,China;School of Cyber Security,Chengdu University of Information Technology,Chengdu,Sichuan610225,China)

机构地区：[1]四川师范大学计算机科学学院,四川成都610101 [2]电子科技大学网络与数据安全四川省重点实验室,四川成都610054 [3]成都信息工程大学网络空间安全学院,四川成都610225

出　　处：《电子学报》2020年第3期561-567,共7页Acta Electronica Sinica

基　　金：国家自然科学基金(No.61373163);国家科技支撑计划课题(No.2014BAH11F02,No.2014BAH11F01);网络与数据安全四川省重点实验室课题(No.NDS2019-1);四川省科技成果转化平台项目(No.2018CC0060);四川省科技计划项目(No.2017GZ0006)。

摘　　要：针对现有密钥策略基于属性加密KP-ABE(Key-Policy Attribute-Based Encryption)方案在解密时存在用户端计算开销大、解密时间长等问题,一些方案提出将解密外包给云服务器,但这些方案并未给出外包解密的并行化方法,存在解密效率低的问题.本文提出一种支持解密外包的KP-ABE方案.在该方案中,把大部分解密计算外包给Spark平台;并根据KP-ABE的解密特点设计并行化解密算法,完成对叶子节点和根节点的并行化解密.性能分析表明,用户端仅需进行一次指数运算即可解密出共享数据,同时并行化设计能有效提高云端解密速率.For most of the existing key-policy attribute-based encryption schemes,there are some problems in the decryption,such as the high cost of the client computing,long decryption time and high resource consumption.Some schemes propose outsourcing decryption to cloud servers.However,these schemes do not give the specific parallelization method of outsourcing decryption in cloud server,and there are problems of low efficiency of cloud decryption.To solve these problems,this paper presents a KP-ABE scheme for decryption outsourcing.In this scheme,most of decryption computation is outsourced to Spark platform;and according to the decryption characteristics of KP-ABE,a decryption parallelization algorithm is designed to complete the parallel decryption of leaf nodes and root nodes.The performance analysis shows that most of decryption computing is done by cloud servers and the client can decrypt the shared data by shared access tree with only once exponential operation,and the parallel design can effectively improve the cloud decryption rate.

关 键 词：密钥策略属性基加密 解密外包 快速解密 共享访问树 秘密共享 SPARK 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]