基于联盟链和CP-ABE的学生信息安全共享方案  

Student Information Security Sharing Scheme Based on Consortium Blockchain and CP-ABE

作　　者：赵鹏[1,2] 亓童颜 卢波 赵捷 ZHAO Peng;QI Tongyan;LU Bo;ZHAO Jie(College of Computer Science and Technology,Taiyuan Normal University,Jinzhong 030619,China;Shanxi Key Laboratory of Intelligent Optimization Computation and Blockchain Technology,Taiyuan Normal University,Jinzhong 030619,China)

机构地区：[1]太原师范学院计算机科学与技术学院,山西晋中030619 [2]太原师范学院智能优化计算与区块链技术山西省重点实验室,山西晋中030619

出　　处：《现代信息科技》2025年第7期168-172,178,共6页Modern Information Technology

摘　　要：针对目前学生信息所存在的访问控制问题,文章提出了一种基于联盟链与CP-ABE的学生信息安全共享方案。该方案通过链上链下协同存储机制,将访问策略存储于联盟链,而把加密后的学生信息保存在云服务中,这样既能减少链上存储成本,又能确保学生信息的安全存储与有效共享。同时,将CP-ABE技术与智能合约结合,利用智能合约的自动化执行能力,自动处理CP-ABE的密钥生成及访问控制策略,实现对学生信息的即时、自动化和细粒度访问管理。通过对方案进行安全分析与实验验证,结果表明该方案具有良好的安全性和可用性,能够有效解决学生信息的访问控制问题,为教育领域的信息安全共享提供了一种新的思路和方法。Aiming at the access control problems of student information,this paper proposes a student information security sharing scheme based on consortium blockchain and CP-ABE.The scheme stores the access policy in the consortium blockchain through the on-chain and off-chain collaborative storage mechanism,and stores the encrypted student information in the cloud service,which can not only reduce the on-chain storage cost,but also ensure the safe storage and effective sharing of student information.At the same time,CP-ABE technology is combined with smart contract,and the key generation and access control strategy of CP-ABE are automatically processed by using the automatic execution ability of smart contract,so as to realize the instant,automatic and fine-grained access management of student information.Through the security analysis and experimental verification of the scheme,the results show that the scheme has good security and availability,can effectively solve the access control problem of student information,and provides a new idea and method for information security sharing in the field of education.

关 键 词：数据共享 联盟链 CP-ABE 智能合约 访问控制 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]