基于时释性的代理重加密多用户数据共享  

Proxy re⁃encryption multi⁃user data sharing based on time release

作　　者：李静元 LI Jingyuan(Shaanxi Normal University,Xi’an 710119,China)

机构地区：[1]陕西师范大学,陕西西安710119

出　　处：《现代电子技术》2022年第21期77-82,共6页Modern Electronics Technique

基　　金：西安市“人工智能”产业创新链推进工程项目(2018YFB1802403)。

摘　　要：针对目前代理重加密的云存储数据共享方案不具有时效性访问控制和共享效率低的问题,提出一种基于时释性的代理重加密多用户数据共享新方案。引入第三方时间服务器生成时间参数和时间陷门,在密文生成时插入时释性参数实现解密时间段的控制,代理服务器根据授权接收者集生成重加密密钥,再重加密生成二次密文群发给接收者集成员,接收者集成员收到二次密文后只有达到指定的发布时间才能解密得到明文。相比传统的端到端数据共享方案,新方案可以实现一对多的数据共享方法,极大提高了数据共享的效率和降低了系统传输带宽。经分析,新方案具有抗明文攻击的安全特性,相比其他方案增加时效性控制访问功能,算法中用到的双线性运算次数更少,实现多用户的数据共享方法提高共享效率。The current proxy re⁃encryption cloud storage data sharing scheme has no timeliness access control and is of low sharing efficiency,so a new proxy re⁃encryption multi⁃user data sharing scheme based on time release is proposed.In the scheme,the third⁃party time server is introduced to generate the time parameter and time trapdoor.The parameters with time release are inserted when the ciphertext is generated to control the decryption time period.The proxy server generates the re⁃encryption key according to the authorized receiver set.And then,re⁃encryption is carried out to generate secondary ciphertext and send it to the receiver set members.After receiving the secondary ciphertext,the receiver set members can decrypt it to get the plaintext only when the specified publishing time is up.In comparison with the traditional end⁃to⁃end data sharing scheme,the new scheme can realize one to many data sharing,which greatly improves the efficiency of data sharing and reduces the system transmission bandwidth.After analysis,the new scheme has the security property of anti plaintext attack,and has timeliness access control function in comparison with the other schemes.In addition,less bilinear operations are adopted in the algorithm,so the multi⁃user data sharing method can improve the sharing efficiency.

关 键 词：时释性 代理重加密 访问控制 多用户数据共享 时间陷门 时间服务器 抗明文攻击 

分 类 号：TN918-34[电子电信—通信与信息系统] TP399[电子电信—信息与通信工程]