区块链环境下基于秘密共享的数字权限管理方案  

Digital rights management scheme based on secret sharing in blockchain environment

作　　者：庞晓琼[1] 杨婷[1] 陈文俊[1,2] 王云婷[1] 刘天野 PANG Xiaoqiong;YANG Ting;CHEN Wenjun;WANG Yunting;LIU Tianye(School of Data Science and Technology,North University of China,Taiyuan Shanxi 030051,China;Taiyuan Central Sub-branch,The People’s Bank of China,Taiyuan Shanxi 030001,China;Electrical and Computer Engineering Management Department,North University of China,Shuozhou,Shuozhou Shanxi 036000,China)

机构地区：[1]中北大学大数据学院,太原030051 [2]中国人民银行太原中心支行,太原030001 [3]中北大学朔州校区电气与计算机工程管理部,山西朔州036000

出　　处：《计算机应用》2021年第11期3257-3265,共9页journal of Computer Applications

基　　金：山西省自然科学基金资助项目(201901D111164)。

摘　　要：针对数字权限保护中对内容加密密钥的安全保存和有效分发的需求,提出了一个区块链环境下基于秘密共享的数字权限保护方案。该方案主要包括系统初始化、内容加密、许可授权和内容解密4个协议。在该方案中,利用Pedersen可验证秘密共享方案和属性基加密(ABE)算法来实现内容加密密钥的保护和分发,将内容提供商从管理内容加密密钥的任务中解放出来,从而确保了密钥管理的安全性和灵活性。此外,基于区块链的数字权限保护方案具有信息公开透明、不可篡改等特点。安全性分析表明,该方案在区块链环境下是安全可行的;仿真实验结果表明,该方案能够以较低的开销实现数字内容的权限保护。In order to meet the requirements of safe storage and effective distribution of content encryption key in digital rights protection,a new digital rights protection scheme based on secret sharing in blockchain environment was proposed,including 4 protocols:system initialization,content encryption,license authorization and content decryption.The Pedersen’s verifiable secret sharing scheme and Attribute-Based Encryption(ABE)algorithm were used to protect and distribute the content encryption key.The content providers were freed from the task of managing content encryption keys,which ensured the security and flexibility of key management.In addition,the digital rights protection scheme based on blockchain has the characteristics of information openness and transparency,and is tamper-resistant.Security analysis show that the proposed scheme is safe and feasible in the blockchain environment;simulation results show that the proposed scheme can achieve the rights protection of digital content with low cost.

关 键 词：数字权限管理 区块链 秘密共享方案 智能合约 属性基加密 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]