基于边缘计算的多授权属性加密方案  

Multi authorization attribute encryption mechanism based on edge computing

作　　者：程小辉[1,2] 丁黄婧 邓昀[1,2] 王宇[1,2] CHENG Xiao-hui;DING Huang-jing;DENG Yun;WANG Yu(College of Information Science and Engineering,Guilin University of Technology,Guilin 541006,China;Guangxi Key Lab of Embedded Technology and Intelligent System,Guilin University of Technology,Guilin 541006,China)

机构地区：[1]桂林理工大学信息科学与工程学院,广西桂林541006 [2]桂林理工大学广西嵌入式技术与智能系统重点实验室,广西桂林541006

出　　处：《计算机工程与设计》2023年第8期2272-2279,共8页Computer Engineering and Design

基　　金：国家自然科学基金项目(61662017、61862019);广西自然科学基金项目(2018GXNSFAA281235);广西科技基地和人才专项基金项目(2018AD19136);广西中青年教师基础能力提升基金项目(2018KY0248、2020KY06026);桂林理工大学科研启动基金项目(GLUTQD2017065)。

摘　　要：传统云存储下属性加密通常在云端与用户直接交流,并且由单一授权机构处理密钥与数据信息,为此提出一种应用在边缘环境下的多授权属性加密方案。方案中的访问矩阵由线性秘密共享构建,将边缘平台作为中间节点,用椭圆曲线密码体制下的简单标量乘法替代属性加密中的双线性计算,通过多授权中心分摊属性管理,直接减少单个授权机构的密钥托管与局部失控问题。理论功能分析与实验结果表明,该方案在可行性与安全性上均优于传统同类算法,有效降低了用户在访问控制中的计算开销。A multi-authorized attribute encryption scheme applied to the edge environment was proposed for the problem that attribute encryption under traditional cloud storage is usually communicated directly with users in the cloud and the key and data information is handled by a single authorized authority.The access matrix in the scheme was constructed by linear secret sharing,the edge platform was used as an intermediate node,and the bilinear computation in attribute encryption was replaced using the simple scalar multiplication method under the elliptic curve cryptographic regime,which directly reduced the key escrow and local runaway problems of a single authorized authority by sharing attribute management among multiple authorized centers.Theoretical functional analysis and experimental results show that the scheme can outperform similar traditional algorithms in terms of feasibility and security,and effectively reduce the computational overhead of users in access control.

关 键 词：边缘计算 访问控制 属性加密 多授权机构 线性秘密共享方案 椭圆曲线密码 解密外包 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]