基于区块链与代理重加密的数据共享方案  

Data Sharing Scheme Based on the Blockchain and the Proxy Re-encryption

作　　者：李莉[1] 曾庆贤 文义红[2] 王士成[2] LI Li;ZENG Qingxian;WEN Yihong;WANG Shicheng(School of Cyber Science and Engineering,Wuhan University,Wuhan 430072,China;The 54th Research Institute of China Electronics Technology Group Corporation,Shijiazhuang 050081,China)

机构地区：[1]武汉大学国家网络安全学院,武汉430072 [2]中国电子科技集团公司第五十四研究所,石家庄050081

出　　处：《信息网络安全》2020年第8期16-24,共9页Netinfo Security

基　　金：国家重点研发计划[2018YFC1315404]。

摘　　要：在不可信环境下实现安全的数据共享一直是一个难题,传统中心化方案存在数据容易被泄露、数据容易被篡改、数据去向难以追踪、监管难度大等问题。公钥体制下的数据共享方案则存在通信代价、计算开销大,实用性差等问题。针对上述问题,文章提出一个基于区块链的数据共享方案。该方案通过区块链维护一个可信账本来保证数据的可追溯性,同时也保证了访问控制权限的不可篡改。在此基础上构建了基于Schnorr的代理重加密方案,通过一个代理重加密密钥实现了数据的安全共享。文章所提方案相比传统方案有较好的安全性和可追溯性,且已成功应用于医疗数据共享项目中。Achieving secure data sharing in an untrusted environment is always a difficult problem.Traditional centralized solutions have problems that data is easily leaked,data is easily tampered,data destination is difficult to track,and supervision is difficult.Data sharing scheme based on public-key system has some problems such as high communication cost,high computation cost and poor practicability.To solve the above problems,this paper proposes a data sharing scheme based on blockchain.The scheme maintains a credible ledger through the blockchain to ensure the traceability of data and immutability of the access control authority.On this basis,a proxy re-encryption scheme based on Schnorr is constructed,which realizes the secure data sharing by a proxy re-encryption secret key.Compared with the traditional schemes,the proposed scheme has better security and traceability,and has been successfully applied in the medical data sharing project.

关 键 词：区块链 代理重加密 数据共享 SCHNORR签名 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]