智能电网中数据可校验加密的密码逆向防火墙设计  

Plaintext-checkable encryption with cryptographic reverse firewalls in smart grid

作　　者：姜哲 张凯 Jiang Zhe;Zhang Kai(College of Computer Science and Technology,Shanghai University of Electric Power,Shanghai 201300,China)

机构地区：[1]上海电力大学计算机科学与技术学院,上海201300

出　　处：《南京理工大学学报》2022年第2期219-223,244,共6页Journal of Nanjing University of Science and Technology

基　　金：国家自然科学基金(61802248);上海市教育委员会“晨光计划”(18CG62)。

摘　　要：云架构下智能电网进入了开放融合新环境,为保障数据的机密性,数据通常以加密形式存储在云服务器中。针对云存储加密数据与原始明文数据的一致性和合法性问题,并考虑大规模监视环境中潜在的斯诺登式后门嵌入攻击威胁,该文为云架构下智能电网中的数据可校验加密系统设计了密码逆向防火墙方案。方案结合明文可校验加密方案与密码逆向防火墙技术,利用密钥与元素可延展性质,有效抵御不可链接性选择明文攻击和后门嵌入攻击,该文给出了方案功能性和安全性的分析证明。The cloud-assisted smart grid has entered an open and integrated environment,where data are usually encrypted at first and then stored in cloud servers to preserve the data confidentiality.To realize the consistency and legitimacy of the original plaintext data and the encrypted data stored in cloud,and considering the potential Snowden backdoor embedding attack under mass surveillance,this paper designs a cryptographic reverse firewall scheme for data checkable encryption system in cloud-assisted smart grid.The scheme combines plaintext-checkable encryption with a cryptographic reverse firewall technology,and employs key and element malleability to resist unlinkable chosen plaintext attacks and backdoor embedding attacks.This paper provides analysis proof of the functionality and security of the scheme.

关 键 词：明文可校验加密 密码逆向防火墙 大规模监视 后门嵌入攻击 密文数据库 智能电网 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]