雾计算中细粒度属性更新的外包计算访问控制方案  

Fine-grained attribute update and outsourcing computing access control scheme in fog computing

作　　者：杜瑞忠 闫沛文 刘妍 DU Ruizhong;YAN Peiwen;LIU Yan(School of Cyber Security and Computer,Hebei University,Baoding 071000,China;Key Lab on High Trusted Information System in Hebei Province,Baoding 071000,China)

机构地区：[1]河北大学网络空间安全与计算机学院,河北保定071000 [2]河北省高可信信息系统重点实验室,河北保定071000

出　　处：《通信学报》2021年第3期160-170,共11页Journal on Communications

基　　金：国家自然科学基金资助项目(No.61572170);河北省自然科学基金资助项目(No.F2018201153);河北省自然科学基金重点资助项目(F2019201290)。

摘　　要：针对基于密文策略的属性加密(CP-ABE)在低时延需求较高的雾计算环境中,存在加解密开销大、属性更新效率低的问题,提出了一种雾计算中细粒度属性更新的外包计算访问控制方案,使用模加法一致性秘密(密钥)分享技术构建访问控制树,将加解密计算操作外包给雾节点,降低用户加解密开销;结合重加密机制,在雾节点建立组密钥二叉树对密文进行重加密,实现对用户属性的灵活更新。安全性分析表明,所提方案在决策双线性Diffie-Hellman假设下是安全的。仿真实验结果表明,所提方案中用户加解密时间开销相比其他方案更小,属性更新效率更高。To slove the problem that in the fog computing environment with comparatively high low latency demand,ciphertext policy attribute based encryption(CP-ABE)faced the problems of high encryption and decryption overhead and low efficiency of attribute update,an fine-grained attribute update and outsourcing computing access control scheme in fog computing was proposed.The unanimous consent control by modular addition technique was used to construct an access control tree,and the computing operations of ecryption and decryption were outsourced to fog nodes in order to reduce user encryption and decryption overhead.Combined with the re-encryption mechanism,a group key binary tree was established at the fog node to re-encrypt the ciphertext so that user attribute can be updated flexibly.The security analysis shows that the proposed scheme is safe under the decision bilinear Diffie-Hellman hypothesis.Compared with other schemes,the results of simulation experiment prove that the time cost of user encryption and decryption in this scheme is lower and the efficiency of attribute update is higher.

关 键 词：访问控制 雾计算 外包计算 属性更新 基于密文策略属性加密 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]