云链协同的属性代理重加密工业互联网数据共享方案  

Industrial Internet Data Sharing Scheme with Attribute-basedProxy Re-encryption in Cloud-chain Collaboration

作　　者：李悦 冯景瑜[1] 王侃 张文波 Li Yue;Feng Jingyu;Wang Kan;Zhang Wenbo(School of Cyberspace Security,Xi’an University of Posts and Telecommunications,Xi’an 710121;Teaching and Research Support Center,Air Force Engineering University,Xi’an 710051)

机构地区：[1]西安邮电大学网络空间安全学院,西安710121 [2]空军工程大学教研保障中心,西安710051

出　　处：《信息安全研究》2025年第5期427-438,共12页Journal of Information Security Research

基　　金：陕西省重点研发计划项目(2024GX-YBXM-076);陕西省自然科学基础研究计划项目(2023-JC-YB-561)。

摘　　要：工业互联网是新一代信息技术与工业系统全方位深度融合的应用生态,通过数据共享可以实现对工业领域各类资源的统筹管理和调配.针对工业互联网数据共享过程中存在的隐私泄露问题,提出一种云链协同的属性代理重加密工业互联网数据共享方案,云中存储海量工业数据密文,链上解决数据安全共享过程中的计算与元数据密文存储问题.结合无证书公钥密码体制,构造可避免私钥托管的密文策略属性基加密的密钥生成算法.设计信任评估共识算法,在区块链网络中选取可信度较高的节点作为代理,解决传统代理重加密中的代理半可信问题.安全分析表明该方案满足关键字安全性和抗共谋攻击性.性能与仿真对比实验结果表明,该方案具有更优的功能与更高的效率,对工业互联网数据共享具有适用性.The industrial Internet is an application ecology of new generation information technology and industrial system in an all-round and deep integration.Through data sharing,it can realize the overall management and allocation of various resources in the industrial field.Aiming at the problem of privacy leakage in the process of industrial Internet data sharing,this paper proposes a cloud-chain collaborative attribute-based proxy re-encryption industrial Internet data sharing scheme,which stores massive industrial data ciphertext in the cloud,and solves the problem of computing and metadata ciphertext storage in the process of data security sharing on the blockchain.Construct a key generation algorithm that can avoid private key escrow by combining certificateless public key cryptography with ciphertext policy attribute-based encryption.Design a trust evaluation consensus algorithm to select nodes with high credibility as proxies in blockchain networks,solving the semi-trust problem of traditional proxy re-encryption.The security analysis shows that the proposed scheme satisfies keyword security and resistance to collusion attacks.The performance and simulation results show that the scheme in this paper has better functions and higher efficiency,and applicability for industrial Internet data sharing.

关 键 词：云存储 区块链 工业互联网 属性代理重加密 数据安全共享 

分 类 号：TP393.0[自动化与计算机技术—计算机应用技术]