基于区块链和属性基加密的个人隐私数据保护方案  

A Novel Personal Privacy Data Protection Scheme Based on Blockchain and Attribute-Based Encryption

作　　者：汪玉江 曹成堂 游林[1] WANG Yu-Jiang;CAO Cheng-Tang;YOU Lin(School of Cyber Science and Engineering,Hangzhou Dianzi University,Hangzhou 310018,China)

机构地区：[1]杭州电子科技大学网络空间安全学院,杭州310018

出　　处：《密码学报》2021年第1期14-27,共14页Journal of Cryptologic Research

基　　金：浙江省自然科学基金重点资助项目(LZ17F020002);国家自然科学基金(61772166)。

摘　　要：针对用户使用第三方应用提供的服务时所带来的隐私泄露问题,提出一种基于属性基加密和区块链的个人隐私数据保护方案.方案利用区块链来保存个人隐私数据的哈希值和第三方应用的属性集,而真正的隐私信息利用属性基算法加密后保存在分布式哈希表中.本方案实现了个人数据的一对多的安全传输和数据的细粒度访问控制;针对用户在不同时期的需求动态变化的特点,提出了一种新的属性基加密方案,用户可以随时撤销第三方应用的访问权限,并且不需要可信第三方.对整个方案进行了仿真实验,验证了方案的可行性和实用性.A personal privacy data protection scheme based on attribute-based encryption and blockchain is proposed, which solves the problem of privacy leakage when users use services provided by third-party applications. The scheme saves the hash value of personal privacy data and the attribute sets of third-party applications on blockchain, while the real privacy information is encrypted using an attribute-based algorithm, the ciphertext is stored in a distributed hash table. The scheme implements one-to-many secure transmission of personal data and fine-grained access control of data. For users’ needs change dynamically in different periods, this paper proposes a new attribute-based encryption scheme. In the proposed scheme, users can revoke access from third-party applications at any time without needing the assistance of a trusted third party. Simulation experiments were carried out to verify the feasibility and practicability of the scheme.

关 键 词：隐私数据 区块链 属性基加密 分布式哈希表 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]