基于属性基加密的区块链隐私保护与访问控制方法

doi:10.3969/j.issn.1671-1122.2020.09.010

信息网络安全 ›› 2020, Vol. 20 ›› Issue (9): 47-51.doi: 10.3969/j.issn.1671-1122.2020.09.010

基于属性基加密的区块链隐私保护与访问控制方法

汪金苗¹^,²(), 谢永恒¹, 王国威³, 李易庭³

1. 北京锐安科技有限公司,北京 100192
2. 北京市网络空间数据分析与应用工程技术中心,北京 100192
3. 北京市公安局,北京 100055

收稿日期:2020-07-16 出版日期:2020-09-10 发布日期:2020-10-15
通讯作者: 汪金苗 E-mail:jinmiao_wang@163.com
作者简介:汪金苗（1987—）,女,山东,博士,主要研究方向为数据安全与访问控制|谢永恒（1972—）,男,湖北,高级工程师,硕士,主要研究方向为大数据分析与挖掘|王国威（1977—）,女,北京,高级工程师,硕士,主要研究方向为信息安全|李易庭（1988—）,男,山西,工程师,本科,主要研究方向为侦查学
基金资助:
北京市青年骨干个人项目(201800002685XG357)

A Method of Privacy Preserving and Access Control in Blockchain Based on Attribute-based Encryption

WANG Jinmiao¹^,²(), XIE Yongheng¹, WANG Guowei³, LI Yiting³

1. Run Technologies Co., Ltd. Beijing, Beijing 100192, China
2. Beijing Cyberspace Data Analysis and Applied Engineering Technology Research Center, Beijing 100192, China
3. Beijing Municipal Bureau of Public Security, Beijing 100055, China

Received:2020-07-16 Online:2020-09-10 Published:2020-10-15
Contact: Jinmiao WANG E-mail:jinmiao_wang@163.com

摘要/Abstract

摘要：

区块链中所有节点都保存相同样本,随着区块链技术的广泛应用,区块链隐私保护与访问控制问题日益突出。文章基于多授权中心的属性基加密算法提出了面向区块链的隐私保护与访问控制方案。多授权中心可以由区块链中的权威节点轮值担任,有效解决了单一授权中心权限过大的问题。采用该方案后,所有数据采用属性基加密算法加密后保存在区块链中,只有属性满足访问控制策略的用户才能成功解密数据,从而实现区块链中的隐私保护与访问控制。

关键词: 访问控制, 隐私保护, 多授权中心, 区块链, 属性基加密

Abstract:

All nodes in the blockchain keep the same information. With the wide application of blockchain technology, the problem of blockchain privacy protection and access control is becoming increasingly prominent. Based on multi-authority attribute-based encryption (MA-ABE), this paper proposes a privacy preserving and access control scheme for blockchain. The authorities are acted by the nodes in blockchain, which effectively solves the problem that the centralized authority is too large. By deploying the proposed scheme, data are encrypted by using MA-ABE and stored in the blockchain. Only users whose attributes meet the access control policy can decrypt the data successfully, which achieves the purpose of privacy preserving and access control in blockchain.

Key words: access control, privacy preserving, multi-authority, blockchain, attribute-based encryption

中图分类号:

TP309

汪金苗, 谢永恒, 王国威, 李易庭. 基于属性基加密的区块链隐私保护与访问控制方法[J]. 信息网络安全, 2020, 20(9): 47-51.

WANG Jinmiao, XIE Yongheng, WANG Guowei, LI Yiting. A Method of Privacy Preserving and Access Control in Blockchain Based on Attribute-based Encryption[J]. Netinfo Security, 2020, 20(9): 47-51.

图/表 2

参考文献 14

[1]	NAKAMOTO S. Bitcoin: A Peer-to-peer Electronic Cash System[EB/OL]. https://bitco.in/pdf/bitcoin.pdf, 2020-1-3.
[2]	SAHAI A, WATERS B. Fuzzy Identity-based Encryption[M]// Springer. Advances in Cryptology - EUROCRYPT. Heidelberg: Springer Berlin Heidelberg, 2005: 457-473.
[3]	CHASE M. Multi-authority Attribute-based Encryption[C]// Springer. The 4th Conference on Theory of Cryptography, February 21-24, 2007, Amsterdam, The Netherlands. Berlin: Springer-Verlag, 2007: 515-534.
[4]	ZYSKIND G, NATHAN O, PENTLAND A S. Decentralizing Privacy: Using Blockchain to Protect Personal Data[C]// IEEE. 2015 IEEE Security and Privacy Workshops, May 21-22, 2015, San Jose, CA, USA. NJ: IEEE, 2015: 180-184.
[5]	ES-SAMAALI H, OUTCHAKOUCHT A, LEROY J P. A Blockchain-based Access Control for Big Data[J]. Journal of Computer Networks and Communications, 2017,17(5):137-147.
[6]	OUADDAH A, ELKALAM A A, OUAHMAN A A. Towards a Novel Privacy-Preserving Access Control Model Based on Blockchain Technology in IoT[M]// Springer. Europe and MENA Cooperation Advances in Information and Communication Technologies. Cham: Springer, Cham , 2017: 523-533.
[7]	RAHULAMATHAVAN Y, PHAN R C W, MISRA S, et al. Privacy-preserving Blockchain-based IoT Ecosystem Using Attribute-based Encryption[C]// IEEE. IEEE International Conference on Advanced Networks and Telecommunications Systems(ANTS), December 17-20, 2017, Bhubaneswar, India. NJ: IEEE, 2017: 1-6.
[8]	JUNG T, LI Xiangyang, WAN Zhiguo, et al. Privacy Preserving Cloud Data Access with Multi-authorities[C]// IEEE. IEEE INFOCOM, April 14-19, 2013, Turin, Italy. NJ: IEEE, 2013: 2625-2633.
[9]	WEI Jianghong, LIU Wenfen, HU Xuexian. Forward-secure Ciphertext-policy Attribute-based Encryption Scheme[J]. Journal on Communications, 2014,35(7):38-45.
	魏江宏, 刘文芬, 胡学先. 前向安全的密文策略基于属性加密方案[J]. 通信学报, 2014,35(7):38-45.
[10]	WANG Guangbo, WANG Jianhua. Research on Cloud Storage Scheme with Attribute-based Encryption[J]. Journal of Electronics & Information Technology, 2016,38(11):2931-2939.
	王光波, 王建华. 基于属性加密的云存储方案研究[J]. 电子与信息学报, 2016,38(11):2931-2939. doi: 10.11999/JEIT160064 URL
[11]	CHASE M, CHOW S S M. Improving Privacy and Security in Multi-authority Attribute-based Encryption[C]// ACM. The 16th ACM Conference on Computer and Communications Security, November 9-13, 2009, Chicago, Illinois, USA. New York: ACM, 2009: 121-130.
[12]	LIN Huang, CAO Zhenfu, LIANG Xiaohui, et al. Secure Threshold Multi Authority Attribute- based Encryption without a Central Authority[J]. Information Sciences, 2010,180(13):2618-2632. doi: 10.1016/j.ins.2010.03.004 URL
[13]	LI Xiehua, ZHANG Mengmeng, LIU Hong, et al. Multi-authority ABE for Access Control in Cloud Storage[J]. Journal of Hunan University(Natural Sciences), 2015,42(10):133-140.
	李谢华, 张蒙蒙, 刘鸿, 等. 基于MA-ABE的云存储访问控制方法[J]. 湖南大学学报(自然科学版), 2015,42(10):133-140.
[14]	GUAN Zhitao, YANG Tingting, XU Ruzhi, et al. Multi-authority Attribute-based Encryption Access Control Model for Cloud Storage[J]. Journal on Communications, 2015,36(6):120-130.
	关志涛, 杨亭亭, 徐茹枝, 等. 面向云存储的基于属性加密的多授权中心访问控制方案[J]. 通信学报, 2015,36(6):120-130.

[1]	韩磊, 陈武平, 曾志强, 曾颖明. 区块链层级网络结构与应用研究[J]. 信息网络安全, 2020, 20(9): 112-116.
[2]	石润华, 石泽. 基于区块链技术的物联网密钥管理方案[J]. 信息网络安全, 2020, 20(8): 1-8.
[3]	李莉, 曾庆贤, 文义红, 王士成. 基于区块链与代理重加密的数据共享方案[J]. 信息网络安全, 2020, 20(8): 16-24.
[4]	吴云坤, 姜博, 潘瑞萱, 刘玉岭. 一种基于零信任的SDN网络访问控制方法[J]. 信息网络安全, 2020, 20(8): 37-46.
[5]	杜义峰, 郭渊博. 一种基于信任值的雾计算动态访问控制方法[J]. 信息网络安全, 2020, 20(4): 65-72.
[6]	边玲玉, 张琳琳, 赵楷, 石飞. 基于LightGBM的以太坊恶意账户检测方法[J]. 信息网络安全, 2020, 20(4): 73-80.
[7]	毛志来, 刘亚楠, 孙惠平, 陈钟. 区块链性能扩展与安全研究[J]. 信息网络安全, 2020, 20(3): 56-64.
[8]	刘鹏, 何倩, 刘汪洋, 程序. 支持撤销属性和外包解密的CP-ABE方案[J]. 信息网络安全, 2020, 20(3): 90-97.
[9]	郎为民, 张汉, 赵毅丰, 姚晋芳. 一种基于区块链的物联网行为监控和活动管理方案[J]. 信息网络安全, 2020, 20(2): 22-29.
[10]	姚萌萌, 唐黎, 凌永兴, 肖卫东. 基于串空间的安全协议形式化分析研究[J]. 信息网络安全, 2020, 20(2): 30-36.
[11]	喻露, 罗森林. RBAC模式下数据库内部入侵检测方法研究[J]. 信息网络安全, 2020, 20(2): 83-90.
[12]	唐春明, 林旭慧. 隐私保护集合交集计算协议[J]. 信息网络安全, 2020, 20(1): 9-15.
[13]	许盛伟, 王飞杰. 多机构授权下可追踪可隐藏的属性基加密方案[J]. 信息网络安全, 2020, 20(1): 33-39.
[14]	汪金苗, 王国威, 王梅, 朱瑞瑾. 面向雾计算的隐私保护与访问控制方法[J]. 信息网络安全, 2019, 19(9): 41-45.
[15]	郝文江, 林云. 互联网企业社会责任现状与启示研究[J]. 信息网络安全, 2019, 19(9): 130-133.

基于属性基加密的区块链隐私保护与访问控制方法

A Method of Privacy Preserving and Access Control in Blockchain Based on Attribute-based Encryption

RichHTML

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

图/表 2

参考文献 14

相关文章 15

编辑推荐

Metrics

本文评价