Puncturable ciphertext-policy attribute-based encryption scheme for efficient and flexible user revocation  

作　　者：Dilxat GHOPUR Jianfeng MA Xindi MA Yinbin MIAO Jialu HAO Tao JIANG 

机构地区：[1]School of Cyber Engineering,Xidian University,Xi’an 710126,China [2]Guangxi Key Laboratory of Trusted Software,Guilin University of Electronic Technology,Guilin 541004,China [3]Xi’an Satellite Control Center,Xi’an 710043,China

出　　处：《Science China(Information Sciences)》2023年第7期126-142,共17页中国科学（信息科学）（英文版）

基　　金：supported by National Key Research and Development Program of China(Grant No.2021YFB3101100);National Natural Science Foundation of China(Grant Nos.61902290,62072352);Key Research and Development Program of Shaanxi(Grant Nos.2020ZDLGY09-06,2019ZDLGY12-04);Guangxi Key Laboratory of Trusted Software(Grant No.kx202004)。

摘　　要：With the rapid deployment of storage services,secure and efficient user authorization and revocation data shared through the cloud have become a grand challenge hindering cloud data applications.When previous direct and indirect user revocation schemes implemented large-scale user revocation,they faced heavy communication and computational costs.To address these challenges,this study presents a new encryption scheme that combines ciphertext-policy attribute-based encryption(CP-ABE)with puncturable encryption to achieve efficient and flexible user revocation.We design a proxy server to reduce the computational overhead in the decryption phase.Because the puncture process is performed on a semi-honest cloud,we use the digital signature method to verify the correctness of its operation.Furthermore,we prove the security of our scheme under the chosen-plaintext attack(CPA),and compare it with other schemes to highlight its advantages.Numerical analysis and experimental simulation results reveal that our scheme is more suitable than other schemes for use in a cloud environment for user revocation.

关 键 词：ciphertext-policy attribute-based encryption puncturable encryption user revocation outsource decryption digital signature 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]