任务匹配中抗密钥泄露可撤销属性加密方案  

Revocable attribute encryption scheme to prevent keydisclosure in task matching

作　　者：董国芳[1] 张楚雯 常远 鲁烨堃 刘兵 DONG Guo-fang;ZHANG Chu-wen;CHANG Yuan;LU Ye-kun;LIU Bing(School of Electrical Information Engineering,Yunnan Minzu University,Kunming 650504,China;School of Computer Science and Engineering,Northeastern University,Shenyang 110167,China)

机构地区：[1]云南民族大学电气信息工程学院,云南昆明650504 [2]东北大学计算机科学与工程学院,辽宁沈阳110167

出　　处：《计算机工程与设计》2023年第12期3563-3570,共8页Computer Engineering and Design

基　　金：国家自然科学基金项目(61662089)。

摘　　要：针对现有属性加密方案难以防止群智感知系统任务匹配密钥泄露和实现用户细粒度撤销问题,提出一个结合默克尔帕特丽夏树和增量哈希的抗密钥泄露可撤销属性加密方案。将单一属性机构分为多个解决系统性能瓶颈问题,利用默克尔帕特丽夏树存储用户身份和私钥信息防止密钥泄露发生,采用增量哈希对更新后的用户信息进行快速修改实现用户撤销和属性撤销。实验结果表明,该方案具有更低的时间开销,能够抵抗共谋攻击,保证前向安全和后向安全。To solve the problem that the existing attribute encryption schemes are difficult to prevent the leakage of task matching keys and achieve fine-grained revocation of users,an anti-key disclosure revocable attribute encryption scheme based on Merkel Patricia tree and incremental hash was proposed.The single attribute organization was divided into several to solve the bottleneck of system performance,and the Merkel Patricia tree was used to store user identity and private key information to prevent key leakage.Incremental hash was used to quickly modify the updated user information to achieve user revocation and attribute revoca-tion.Experimental results show that the scheme has lower time overhead,can resist collusion attacks,and ensures forward security and backward security.

关 键 词：任务匹配 抗密钥泄露 可撤销 属性加密 默克尔帕特丽夏树 增量哈希 多属性授权 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]