云计算中可撤销存储的外包加解密CP-ABE方案

doi:10.3969/j.issn.1671-1122.2017.06.002

信息网络安全 ›› 2017, Vol. 17 ›› Issue (6): 6-8.doi: 10.3969/j.issn.1671-1122.2017.06.002

云计算中可撤销存储的外包加解密CP-ABE方案

卿勇^{1, 2}, 孙伟¹, 熊虎¹, 赵洋¹

1. 电子科技大学软件学院,四川成都 610054;
2. 达州职业技术学院,四川达州635001

收稿日期:2017-04-27 出版日期:2017-06-20
通讯作者: 熊虎 xionghu.uestc@gmail.com
作者简介:卿勇（1960-）,男,四川,副教授,主要研究方向为计算机科学、密码学;孙伟（1992-）,男,四川,硕士研究生,主要研究方向为密码学;熊虎（1982-）,男,四川,副教授,博士,主要研究方向为密码学、网络安全;赵洋（1973-）,男,四川,副教授,博士,主要研究方向为密码学、网络安全。
基金资助:
国家自然科学基金[61370026]

Outsourcing Encryption and Decryption CP-ABE Scheme with Revocation Storage in Cloud Computing

QING Yong^{1, 2}, SUN Wei¹, XIONG Hu¹, ZHAO Yang¹

1. School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu Sichuan 610054, China;
2. Dazhou Vocational and Technical College, Dazhou Sichuan 635001, China

Received:2017-04-27 Online:2017-06-20

摘要/Abstract

摘要： 考虑到用户对数据隐私性的需求以及云服务器的不可信,利用属性基密码体制（ABE）构建面向云存储的安全数据共享方案被广泛研究。当用户被撤销时,现有的标准ABE机制无法确保被撤销的用户不能继续访问云服务器中的海量密文数据。针对上述问题,文章结合密文更新和密钥更新的思想,提出了一种可以支持加解密外包的可撤销存储的密文策略属性基加密（SR-CP-ABE）方案。该方案通过定期更新存储在云服务器中的密文来确保用户被撤销后无法访问这些密文。同时,该方案通过结合密钥拆分的思想,将加解密过程中的复杂计算外包到不可信的云服务器,降低了用户的加解密计算量,实验结果表明文章提出的方案是高效可行的。

关键词: 云计算, 密文访问控制, 外包加解密计算, 用户撤销, 密钥更新

Abstract: Taking into account the user’s need for data privacy and the untrustworthiness of cloud servers, the use of attribute-based cryptography(ABE) to build cloud-oriented security data sharing program is widely studied. When a user is revoked, the existing standard ABE mechanism can’t ensure that the revoked user can’t continue to access the massive ciphertext data in the cloud server. Aiming at the above problems, this paper proposes a ciphertext strategy attribute encryption scheme(SR-CP-ABE) which can support the reusable storage of encryption and decryption by combining the idea of ciphertext update and key update. The program ensures that the user can’t access the ciphertext by periodically updating the ciphertext stored in the cloud server. At the same time, this program through the combination of the idea of key split, encryption and decryption process in the complex computing outsourcing to the untrusted cloud server to reduce the user’s encryption and decryption calculation. The experimental results show that the proposed scheme is efficient and feasible.

Key words: cloud computing, ciphertext access control, outsourcing encryption and decryption computation, user revocation, key update

中图分类号:

TP393

卿勇, 孙伟, 熊虎, 赵洋. 云计算中可撤销存储的外包加解密CP-ABE方案[J]. 信息网络安全, 2017, 17(6): 6-8.

QING Yong, SUN Wei, XIONG Hu, ZHAO Yang. Outsourcing Encryption and Decryption CP-ABE Scheme with Revocation Storage in Cloud Computing[J]. 信息网络安全, 2017, 17(6): 6-8.

参考文献

[1] SAHAI A, WATERS B. Fuzzy Identity-based Encryption[C]//IACR. Advances in Cryptology-EUROCRYPT 2005, May 22-26, 2005, Aarhus, Denmark. Heidelberg: Springer, 2005: 457-473.
[2] GOYAL V, PANDEY O, SAHAI A, et al. Attribute-based Encryption for Fine-grained Access Control of Encrypted Data[C]//ACM. 13th ACM Conference on Computer and Communications Security, October 30-November 3, 2006, Alexandria, VA, USA. New York: ACM, 2006: 89-98.
[3] BETHENCOURT J, SAHAI A, WATERS B. Ciphertext-policy Attribute-based Encryption[C]//IEEE. 2007 IEEE Symposium on Security and Privacy, May 20-23 2007, Oakland, California, USA. New Jersey: IEEE, 2007:321-334.
[4] CHEUNG L, NEWPORT C. Provably Secure Ciphertext Policy ABE[C]//ACM. 2007 ACM Conference on Computer and Communications Security, October 28-31, 2007, Alexandria, Virginia, USA. New York: ACM, 2007: 456-465.
[5] WATERS B. Ciphertext-policy Attribute-based Encryption: an Expressive, Efficient, and Provably Secure Realization[C]//IACR. 14th International Conference on Practice and Theory in Public Key Cryptography, March 6-9, 2011, Taormina, Italy. Heidelberg: Springer, 2011: 53-70.
[6] LEWKO A, OKAMOTO T, SAHAI A, et al. Fully Secure Functional Encryption: Attribute-based Encryption and(Hierarchical) inner Product Encryption[C]//IACR. 29th Annual International Conference on the Theory and Applications of Cryptographic Techniques, May 30-June 3, 2010, French Riviera, France. Heidelberg: Springer, 2010: 62-91.
[7] 赵洋,任化强,熊虎,等. 无双线性对的云数据完整性验证方案[J]. 信息网络安全,2015（7）：7-12.
[8] 杨小东,王彩芬. 基于属性群的云存储密文访问控制方案[J]. 计算机工程,2012,38（11）：20-22.
[9] LI Jin, CHEN Xiaofeng, LI Jingwei, et al. Fine-granied Access Control System Based on Outsourced Attribute-based Encryption[C]//Springer. 18th European Symposium on Research in Computer Security, September 9-13, 2013, Egham UK. Heidelberg: Springer, 2013: 592-609.
[10] 李勇,曾振宇,张晓菲. 支持属性撤销的外包解密方案[J]. 清华大学学报（自然科学版）,2013,53（12）：1964-1969.
[11] GREEN M, HOHENBERGER S, WATERS B. Outsourcing the Decryption of ABE Ciphertexts[C]//ACM. 2011 USENIX Conference on Security, August 8-12, 2011, San Francisco, CA. New York: ACM, 2011: 1-16.
[12] 秦志光,包文意,赵洋,等. 云计算里的一种无双线性对的模糊关键字加密方式[J]. 信息网络安全,2015（11）：1-6.
[13] QIN Baodong, DENG R H, LIU Shengli, et al. Attribute-based Encryption with Efficent Verifiable Outsourced Decryption[J]. Information Forensics and Security, 2013, 10(7): 1384-1393.
[14] LI Jingwei, JIA Chunfu, LI Jin, et al. Outsourcing Encryption of Attribute-based Encryption with MapReduce[C]//ACM. 14th International Conference on Information and Communications Security, October 29-31, 2012, Hong Kong, China. New York: ACM, 2012: 191-201.
[15] LI Jin, HUANG Xinyin , LI Jingwei, et al. Securely Outsourcing Attribute-based Encryption with Checkability [J]. Parallel and Distributed System, 2014, 25(8): 2201-2210.
[16] 赵洋,陈阳,熊虎,等. 云环境下一种可撤销授权的数据拥有性证明方案[J]. 信息网络安全,2015（8）：1-7.
[17] WANG Hao, HE Debiao, SHEN Jian, et al. Verifiable Outsourced Ciphertext-policy Attribute-based Encryption in Cloud Computing[EB/OL]. https://www.researchgate.net/publication/305310348_Verifiable_outsourced_ciphertext-policy_attribute-based_encryption_in_cloud_computing, 2017-2-11.
[18] BONEH D, GOH E, NISSIM K. Evaluating 2-DNF Formulas on Ciphertexts[EB/OL]. http://web.cs.ucdavis.edu/~franklin/ecs228/pubs/2dnf.pdf, 2017-2-12.
[19] BEIMEL A. Secure Schemes for Secret Sharing and Key Distribution[EB/OL]. http://www.dphu.org/uploads/attachements/books/books_1542_0.pdf, 2017-2-12.
[20] LEWKO A, OKAMOTO T, SAHAI A, et al. Fully Secure Functional Encryption: Attribute-based Encryption and(Hierarchical) inner Product Encryption[C]//IACR. 29th Annual International Conference on the Theory and Applications of Cryptographic Techniques, May 30-June 3, 2010, French Riviera, France. Heidelberg: Springer, 2010: 62-91.
[21] ROUSELAKIS Y, WATERS B. Efficient Statically-secure Large-universe Multi-authority Attribute-based Encryption[C]//Springer. 2015 International Conference on Financial Cryptography and Data Security, January 26-30, 2015, Puerto Rico. Heidelberg: Springer, 2015: 315-332.
[22] 秦志光,包文意,赵洋,等. 云存储中一种模糊关键字搜索加密方案[J]. 信息网络安全,2015（6）：7-12.
[23] 闫玺玺,唐用力. 数据外包环境下的一种支持属性撤销的属性基加密方案[J].通信学报,2015,36（10）：92-100.
[24] 方雪峰,王晓明. 可撤销用户的外包加解密CP-ABE方案[J]. 计算机工程,2016,42（12）：124-128,132.
[25] 赵洋,包文意,熊虎,等. 云计算里一种陷门无法识别的公钥搜索加密方案[J]. 信息网络安全,2016（1）：1-5.
[26] LI Keying, MA Hua. Outsourcing Decryption of Multi-authority ABE Ciphertexts[J] International Journal Network Security, 2014, 16(4): 286-294.

云计算中可撤销存储的外包加解密CP-ABE方案

Outsourcing Encryption and Decryption CP-ABE Scheme with Revocation Storage in Cloud Computing

RichHTML

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

本文评价

[1]	刘渊, 乔巍. 云环境下基于Kubernetes集群系统的容器网络研究与优化[J]. 信息网络安全, 2020, 20(3): 36-44.
[2]	白嘉萌, 寇英帅, 刘泽艺, 查达仁. 云计算平台基于角色的权限管理系统设计与实现[J]. 信息网络安全, 2020, 20(1): 75-82.
[3]	任良钦, 王伟, 王琼霄, 鲁琳俪. 一种新型云密码计算平台架构及实现[J]. 信息网络安全, 2019, 19(9): 91-95.
[4]	余奕, 吕良双, 李肖坚, 王天博. 面向移动云计算场景的动态网络拓扑描述语言[J]. 信息网络安全, 2019, 19(9): 120-124.
[5]	王紫璇, 吕良双, 李肖坚, 王天博. 基于共享存储的OpenStack虚拟机应用分发策略[J]. 信息网络安全, 2019, 19(9): 125-129.
[6]	崔艳鹏, 冯璐铭, 闫峥, 蔺华庆. 基于程序切片技术的云计算软件安全模型研究[J]. 信息网络安全, 2019, 19(7): 31-41.
[7]	葛新瑞, 崔巍, 郝蓉, 于佳. 加密云数据上支持可验证的关键词排序搜索方案[J]. 信息网络安全, 2019, 19(7): 82-89.
[8]	田春岐, 李静, 王伟, 张礼庆. 一种基于机器学习的Spark容器集群性能提升方法[J]. 信息网络安全, 2019, 19(4): 11-19.
[9]	赵谱, 崔巍, 郝蓉, 于佳. 一种针对El-Gamal数字签名生成的安全外包计算方案[J]. 信息网络安全, 2019, 19(3): 81-86.
[10]	张振峰, 张志文, 王睿超. 网络安全等级保护2.0云计算安全合规能力模型[J]. 信息网络安全, 2019, 19(11): 1-7.
[11]	冯新扬, 沈建京. 一种基于Yarn云计算平台与NMF的大数据聚类算法[J]. 信息网络安全, 2018, 18(8): 43-49.
[12]	陶源, 黄涛, 张墨涵, 黎水林. 网络安全态势感知关键技术研究及发展趋势分析[J]. 信息网络安全, 2018, 18(8): 79-85.
[13]	张琦, 林喜军, 曲海鹏. 云计算中支持授权相等测试的基于身份加密方案[J]. 信息网络安全, 2018, 18(6): 52-60.
[14]	张建标, 杨石松, 涂山山, 王晓. 面向云计算环境的vTPCM可信管理方案[J]. 信息网络安全, 2018, 18(4): 9-14.
[15]	陈妍, 戈建勇, 赖静, 陆臻. 云上信息系统安全体系研究[J]. 信息网络安全, 2018, 18(4): 79-86.