Controllable and Supervised Privacy Protection Scheme for Blockchain Organization Transaction Based on Attribute Encryption

doi:10.3969/j.issn.1671-1122.2023.12.010

Abstract

Abstract:

Blockchain technology has broad application prospects, and has been widely deployed in the financial industry, supply chain, and digital assets. However, in practical applications, since the blockchain data is public, private information may be leaked in some cases, and there are still some challenges in privacy protection in the blockchain. In an organization-based blockchain system, in order to meet the cooperation within or between organizations, it is necessary to control access to transaction content while protecting privacy to achieve controllable privacy protection. While protecting user privacy, blockchain also needs to be supervised to protect the legality and security of data. Therefore, this paper proposed a controllable and supervised privacy protection scheme for blockchain multi-organization transactions based on attribute encryption. The scheme did not rely on a specific privacy protection method, and used attribute-based encryption to control access to privacy protection trapdoors, which could be used as an independent module. This scheme allowed trading organizations to control the scope of privacy protection on their own, and the supervisory department could assign different supervisors according to different trading organizations. Experimental analysis shows that the scheme realizes the controllable privacy protection and multi-regulator hierarchical supervision of multi-organization transactions in the blockchain, and has high security and high performance at the same time.

Key words: blockchain, privacy protection, supervision, attribute-based encryption

CLC Number:

TP309

LI Jiahui, QIN Sujuan, GAO Fei, SUN Dongxu. Controllable and Supervised Privacy Protection Scheme for Blockchain Organization Transaction Based on Attribute Encryption[J]. Netinfo Security, 2023, 23(12): 103-112.

Figures/Tables 7

References 21

[1]	FENG Qi, HE Debiao, ZEADALLY S, et al. A Survey on Privacy Protection in Blockchain System[J]. Journal of Network and Computer Applications, 2019, 126: 45-58. doi: 10.1016/j.jnca.2018.10.020
[2]	ZHU Liehuang, GAO Feng, SHEN Meng, et al. Survey on Privacy Preserving Techniques for Blockchain Technology[J]. Journal of Computer Research and Development, 2017, 54(10): 2170-2186.
	祝烈煌, 高峰, 沈蒙, 等. 区块链隐私保护研究综述[J]. 计算机研究与发展, 2017, 54(10): 2170-2186.
[3]	WANG Chenxu, CHENG Jiacheng, SANG Xinxin, et al. Data Privacy-Preserving for Blockchain: State of the Art and Trends[J]. Journal of Computer Research and Development, 2021, 58(10): 2099-2119.
	王晨旭, 程加成, 桑新欣, 等. 区块链数据隐私保护:研究现状与展望[J]. 计算机研究与发展, 2021, 58(10): 2099-2119.
[4]	MAO Xiangke, LI Xinhang, GUO Suwei. A Blockchain Architecture Design that Takes into Account Privacy Protection and Regulation[C]// Springer. International Conference on Web Information Systems and Applications. Berlin:Springer, 2021: 311-319.
[5]	XUE Zhiyuan, WANG Miao, ZHANG Qiuyue, et al. A Regulatable Blockchain Transaction Model with Privacy Protection[J]. International Journal of Computational Intelligence Systems, 2021, 14(1): 1642-1652. doi: 10.2991/ijcis.d.210528.001 URL
[6]	SONG Jingwen, ZHANG Dawei, HAN Xu, et al. Supervised Identity Privacy Protection Scheme in Blockchain[J]. Journal of Software, 2022: 1-21.
	宋靖文, 张大伟, 韩旭, 等. 区块链中可监管的身份隐私保护方案[J]. 软件学报, 2022: 1-21.
[7]	LIANG Wei, YANG Yang, YANG Ce, et al. PDPChain: A Consortium Blockchain-Based Privacy Protection Scheme for Personal Data[J]. IEEE Transactions on Reliability, 2022: 1-13.
[8]	ZHANG Jianxiong, GUO Bing, DING Xuefeng, et al. Distributed Supervision Model for Enterprise Data Asset Trading Based on Blockchain Multi-Channel in Industry Alliance[J]. Sensors, 2022, 22(20): 7842-7853. doi: 10.3390/s22207842 URL
[9]	LIN Chao. Research on Technology of Privacy Protection in Blockchain Systems and Its Applications[D]. Wuhan: Wuhan University, 2020.
	林超. 面向区块链系统的隐私保护技术及其应用研究[D]. 武汉: 武汉大学, 2020.
[10]	GÜR K D, POLYAKOV Y, ROHLOFF K, et al. Practical Applications of Improved Gaussian Sampling for Trapdoor Lattices[J]. IEEE Transactions on Computers, 2019, 68(4): 570-584. doi: 10.1109/TC.2018.2874479 URL
[11]	WANG Xiaoyun, LIU Mingjie. Survey of Lattice-Based Cryptography[J]. Journal of Cryptologic Research, 2014, 1 (1): 13-27.
	王小云, 刘明洁. 格密码学研究[J]. 密码学报, 2014, 1(1): 13-27. doi: 10.13868/j.cnki.jcr.000002
[12]	MICCIANCIO D, REGEV O. Worst-Case to Average-Case Reductions Based on Gaussian Measures[J]. SIAM Journal on Computing, 2007, 3(1): 267-302.
[13]	LYUBASHEVSKY V, PEIKERT C, REGEV O. On Ideal Lattices and Learning with Errors over Rings[C]// Springer. EUROCRYPT 2010. Berlin:Springer, 2010: 1-23.
[14]	BANSARKHANI R E, BUCHMANN J. Improvement and Efficient Implementation of a Lattice-Based Signature Scheme[C]// Springer. Selected Areas in Cryptography 2013. Berlin:Springer, 2014: 48-67.
[15]	MICCIANCIO D, PEIKERT C. Trapdoors for Lattices: Simpler, Tighter, Faster, Smaller[C]// Springer. EUROCRYPT 2012. Berlin:Springer, 2012: 700-718.
[16]	SAHAI A, WATERS B. Fuzzy Identity-Based Encryption[C]// Springer. EUROCRYPT 2005. Berlin:Springer, 2005: 457-473.
[17]	GOYAL V, PANDEY O, SAHAI A, et al. Attribute-Based Encryption for Fine-Grained Access Control of Encrypted Data[C]// ACM. 13th ACM Conference on Computer and Communications Security. New York: ACM, 2006: 89-98.
[18]	WANG Yue, FAN Kai. Effective CP-ABE with Hidden Access Policy[J]. Journal of Computer Research and Development, 2019, 56(10): 2151-2159.
	王悦, 樊凯. 隐藏访问策略的高效CP-ABE方案[J]. 计算机研究与发展, 2019, 56(10): 2151-2159.
[19]	FENG Dengguo, CHEN Cheng. Research on Attribute-Based Cryptography[J]. Journal of Cryptologic Research, 2014, 1 (1): 1-12.
	冯登国, 陈成. 属性密码学研究[J]. 密码学报, 2014, 1(1): 1-12. doi: 10.13868/j.cnki.jcr.000001
[20]	ZHANG Jiang, ZHANG Zhenfeng, GE Aijun. Ciphertext Policy Attribute-Based Encryption from Lattices[C]// ACM. 7th ACM Symposium on Information, Computer and Communications Security. New York: ACM, 2012: 16-17.
[21]	RUAN Pingcheng, KANZA Y, OOI B C, et al. LedgerView: Access-Control Views on Hyperledger Fabric[C]// ACM. 2022 International Conference on Management of Data. New York: ACM, 2022: 2218-2231.

方案	可监管隐私保护	隐私保护范围可控	分级监管	访问策略可更新
文献[4]方案	√	√	×	×
文献[5]方案	√	×	×	×
文献[6]方案	√	×	×	×
文献[7]方案	×	√	×	×
本文方案	√	√	√	√