基于区块链与CP-ABE策略隐藏的众包测试任务隐私保护方案  

Privacy protection scheme for crowdsourced testing tasks based on blockchain and CP-ABE policy hiding

作　　者：高改梅[1] 张瑾 刘春霞[1] 党伟超[1] 白尚旺[1] GAO Gaimei;ZHANG Jin;LIU Chunxia;DANG Weichao;BAI Shangwang(College of Computer Science and Technology,Taiyuan University of Science and Technology,Taiyuan Shanxi 030024,China)

机构地区：[1]太原科技大学计算机科学与技术学院,太原030024

出　　处：《计算机应用》2024年第3期811-818,共8页journal of Computer Applications

基　　金：太原科技大学科研启动基金资助项目(20192062);太原科技大学研究生教育创新计划项目(JG2022010)。

摘　　要：为完善云环境下众测(众包测试)数据共享体系,解决众测领域存在的数据安全与隐私保护问题,提出基于区块链与基于密文策略的属性加密(CP-ABE)策略隐藏的众测任务隐私保护(CTTPP)方案。将区块链和属性基加密相结合,以提高众测数据共享的隐私性。首先,利用末端内部节点构造访问树表达访问策略,配合CP-ABE中的指数运算和双线性配对运算实现策略隐藏,以提高众测场景下数据共享的隐私保护能力;其次,调用区块链智能合约自动化验证数据访问者的合法性,与云服务器共同完成对任务密文访问权限的验证,进一步提高众测任务的安全性。性能测试结果表明,与同类型访问树策略隐藏算法相比,平均加密解密时间更短,加解密的计算开销更小;另外,当解密请求频率达到每秒1000笔时,区块链的处理能力开始逐渐饱和,数据上链和数据查询的最大处理时延为0.80 s和0.12 s,适用于轻量级的商业化众测应用场景。In order to improve the crowdsourced testing data sharing system in the cloud environment and solve the problems of data security and privacy protection in the field of crowdsourced testing,a Crowdsourced Testing Task Privacy Protection(CTTPP)scheme based on blockchain and CP-ABE(Ciphertext-Policy Attribute-Based Encryption)policy hiding was proposed.Blockchain technology and attribute based encryption were combined to improve the privacy of crowdsourced testing data sharing by the proposed scheme.Firstly,the terminal internal nodes were used to construct an access tree to express the access policy,and the exponentiation operation and bilinear pairing operation in CP-ABE were used to realize policy hiding,so as to improve the privacy protection ability of data sharing in the crowdsourced testing scenarios.Secondly,the blockchain smart contract was called to automatically verify the legitimacy of data visitors,and completed the verification of task ciphertext access rights together with the cloud server to further improve the security of crowdsourced testing tasks.The performance test results show that the average encryption and decryption time is shorter,and the calculation overhead of encryption and decryption is lower than the same type of access tree policy hiding algorithm.In addition,when the frequency of decryption requests reaches 1000 transactions per second,the processing capacity of blockchain is saturated gradually,and the maximum processing delay for data uplinking and data querying is 0.80 s and 0.12 s,so the proposed scheme is suitable for lightweight commercial crowdsourced testing application scenarios.

关 键 词：隐私保护 众包测试 策略隐藏 区块链 属性基加密 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]