抗共谋攻击的多授权电子健康记录共享方案  

Collusion-Resistant Multi-Authority Electronic Health Records Sharing Scheme

作　　者：王经纬[1,3] 吴静雯 殷新春 WANG Jing-wei;WU Jing-wen;YIN Xin-chun(College of Information Engineering,Yangzhou University,Yangzhou,Jiangsu 225127,China;Guangling College of Yangzhou University,Yangzhou,Jiangsu 225128,China;Guangdong Provincial Key Laboratory of Information Security Technology,Guangzhou,Guangdong 510275,China)

机构地区：[1]扬州大学信息工程学院,江苏扬州225127 [2]扬州大学广陵学院,江苏扬州225128 [3]广东省信息安全技术重点实验室,广东广州510275

出　　处：《电子学报》2023年第5期1179-1186,共8页Acta Electronica Sinica

基　　金：广东省信息安全技术重点实验室开放基金(No.2020B1212060078)。

摘　　要：为解决属性基加密方案中用户权限变更不灵活以及无法抵抗共谋攻击的问题,本文提出一种抗共谋攻击的多授权电子健康记录共享方案.采用版本控制的方式实现属性撤销,属性授权中心为非撤销用户提供更新密钥并更新密文,而没有更新密钥的用户将无法继续获取数据.为了保证数据访问的效率,系统将大部分计算外包至云服务器执行.此外,所有属性授权中心需要生成各自的公私钥对以抵抗共谋攻击.本方案在随机谕言模型下满足选择明文攻击不可区分安全,与其他多中心方案相比,功能更加实用且解密开销至少降低了45.9%.To achieve flexible user revocation and collusion attack resistance,this paper proposes a collusion-resis-tant multi-authority EHRs(Electronic Health Records)sharing scheme.Version control is used to achieve user revocation.Attribute authorities need to distribute update keys for non-revoked users as well as update the ciphertexts in the cloud,and users without update keys will not be able to access data.To guarantee the performance of data retrieval,most of the compu-tation is outsourced to the cloud.Besides,all the attribute authorities need to generate a pair of public key and secret key to resist collusion attacks.The proposed scheme is indistinguishably secure against chosen-plaintext attack under the random oracle model.Compared to other multi-authority schemes,the proposed scheme is practical in function and the overhead of the decryption is reduced by at least 45.9%.

关 键 词：属性基加密 多授权中心 抗共谋攻击 属性撤销 外包解密 外包可验证 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]