基于区块链和去中心化可问责属性认证的众包方案  

Crowdsourcing Scheme Based on Blockchain and Decentralized Accountable Attribute-based Authentication

作　　者：陶静怡 张亮[3] 阚海斌[1,2,4] TAO Jing-Yi;ZHANG Liang;KAN Hai-Bin(School of Computer Science,Fudan University,Shanghai 200433,China;Fudan-Zhongan Joint Laboratory of Blockchain and Information Security,Shanghai Engineering Research Center of Blockchain,Shanghai 200433,China;School of Cyberspace Security(School of Cryptology),Hainan University,Haikou 570228,China;Yiwu Research Institute,Fudan University,Jinhua 322000,China)

机构地区：[1]复旦大学计算机科学技术学院,上海200433 [2]上海市区块链工程技术研究中心复旦-众安区块链与信息安全联合实验室,上海200433 [3]海南大学网络空间安全学院(密码学院),海南海口570228 [4]复旦大学义乌研究院,浙江金华322000

出　　处：《软件学报》2025年第4期1844-1858,共15页Journal of Software

基　　金：国家重点研发计划(2019YFB2101703);国家自然科学基金(62272107,62302129);上海市科技创新行动计划(21511102200);广东省重点研发计划(2020B0101090001);海南省重点研发项目(ZDYF2024GXJS030)。

摘　　要：众包是一种分布式解决问题的方式,可以降低成本并有效利用资源.区块链技术的引入解决了传统众包平台集中化程度过高的问题,但它的透明性却带来了隐私泄露的风险.传统的匿名认证虽然可以隐藏用户身份,但存在匿名滥用的问题,同时还增加了对工作者筛选的难度.提出一种去中心化可问责属性认证方案,并将其与区块链结合设计一种新型众包方案.该方案利用去中心化属性加密与非交互式零知识证明技术,在保护用户身份隐私的同时实现可链接性和可追踪性,并且请求者可以制定访问策略来筛选工作者.此外,该方案通过门限秘密分享技术实现了属性授权机构和追踪组,提高系统的安全性.通过实验仿真和分析证明该方案在时间和存储开销上符合实际应用需求.As a distributed approach to problem solving,crowdsourcing reduces costs and efficiently utilizes resources.While blockchain technology is introduced to solve the problem of over-centralization in traditional crowdsourcing platforms,its transparency brings the risk of privacy leakage.The traditional anonymous authentication can hide the user’s identity,but the anonymity is abused,and the worker selection gets more difficult.In this study,a decentralized accountable attribute-based authentication scheme is proposed and combined with blockchain to design a novel crowdsourcing scheme.Using decentralized attribute-based encryption and non-interactive zero-knowledge proof,the scheme protects the privacy of users’identities with linkability and traceability,and the requester can devise access policies to select workers.In addition,the scheme improves the security of the system by implementing attribute authorization authority and tracking groups through the threshold secret sharing technique.Through experimental simulation and analysis,it is demonstrated that the scheme meets the requirements of time and storage overhead in practical application.

关 键 词：区块链 属性加密 零知识证明 众包 匿名认证 可问责制 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]