Achieving Fuzzy Matching Data Sharing for Secure Cloud-Edge Communication  

作　　者：Chuan Zhang Mingyang Zhao Yuhua Xu Tong Wu Yanwei Li Liehuang Zhu Haotian Wang 

机构地区：[1]School of Cyberspace Science and Technology,Beijing Institute of Technology,Beijing 100081,China [2]School of Computer Science and Technology,Beijing Institute of Technology,Beijing 100081,China [3]Yangtze Delta Region Academy of Beijing Institute of Technology,Jiaxing 314019,China [4]National Computer Network Emergency Response Technical Team/Coordination Center of China,Beijing 100029,China [5]College of Arts and Science,University of Pennsylvania,Philadelphia 19104,USA

出　　处：《China Communications》2022年第7期257-276,共20页中国通信（英文版）

基　　金：supported by the China Postdoctoral Science Foundation (Grant Nos. 2021TQ0042, 2021M700435, 2021TQ0041);the National Natural Science Foundation of China (Grant No. 62102027);the Shandong Provincial Key Research and Development Program (2021CXGC010106)

摘　　要：In this paper,we propose a novel fuzzy matching data sharing scheme named FADS for cloudedge communications.FADS allows users to specify their access policies,and enables receivers to obtain the data transmitted by the senders if and only if the two sides meet their defined certain policies simultaneously.Specifically,we first formalize the definition and security models of fuzzy matching data sharing in cloud-edge environments.Then,we construct a concrete instantiation by pairing-based cryptosystem and the privacy-preserving set intersection on attribute sets from both sides to construct a concurrent matching over the policies.If the matching succeeds,the data can be decrypted.Otherwise,nothing will be revealed.In addition,FADS allows users to dynamically specify the policy for each time,which is an urgent demand in practice.A thorough security analysis demonstrates that FADS is of provable security under indistinguishable chosen ciphertext attack(IND-CCA)in random oracle model against probabilistic polynomial-time(PPT)adversary,and the desirable security properties of privacy and authenticity are achieved.Extensive experiments provide evidence that FADS is with acceptable efficiency.

关 键 词：fuzzy-matching privacy-preserving set intersection cloud-edge communication data sharing 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]