Blockchain data access control scheme based on CP-ABE algorithm

Yunxiang QIU; Hongxia ZHANG; Qi CAO; Jiancong ZHANG; Xingshu CHEN; Hongjian JIN

doi:10.11959/j.issn.2096-109x.2020037

您当前的位置：

首页 >

文章列表页 >

Blockchain data access control scheme based on CP-ABE algorithm

Papers | 更新时间：2024-06-03

- Blockchain data access control scheme based on CP-ABE algorithm
- Chinese Journal of Network and Information Security Vol. 6, Issue 3, Pages: 88-98(2020)
- 作者机构：
  
  1. 华信咨询设计研究院有限公司，浙江杭州 310000
  2. 四川大学网络空间安全学院，四川成都610065
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2020037
  CLC： TP309.2
- Online First：2020-06，
  
  Published：15 June 2020
- 稿件说明：
移动端阅览
Yunxiang QIU, Hongxia ZHANG, Qi CAO, et al. Blockchain data access control scheme based on CP-ABE algorithm[J]. Chinese Journal of Network and Information Security, 2020, 6(3): 88-98.
DOI：

Yunxiang QIU, Hongxia ZHANG, Qi CAO, et al. Blockchain data access control scheme based on CP-ABE algorithm[J]. Chinese Journal of Network and Information Security, 2020, 6(3): 88-98. DOI： 10.11959/j.issn.2096-109x.2020037.

摘要

与公有链不同，联盟区块链超级账本Fabric额外集成了成员管理服务机制，能够提供基于通道层面的数据隔离保护。但这种数据隔离保护机制在通道内同步的仍是明文数据，因此存在一定程度的数据泄露风险。另外，基于通道的数据访问控制在一些细粒度隐私保护场景下也不适用。为了解决上述提及的联盟链超级账本中存在的数据隐私安全问题，提出了一种基于CP-ABE算法的区块链数据访问控制方案。结合超级账本中原有的Fabric-CA模块，提出的方案在实现用户级细粒度安全访问控制区块链数据的同时，还能够实现对CP-ABE方案中用户属性密钥的安全分发。对该方案进行的安全分析表明，该方案实现了ABE用户属性私钥安全分发和数据隐私性保护的安全性目标，性能分析部分也说明了所提方案具有良好的可用性。

Abstract

Different from the public chain

the consortium blockchain Hyperledger Fabric integrates the additional member management service(MSP) mechanism to provide channel-based data isolation protection.However

the data isolation protection mechanism still synchronizes the plaintext data within a channel

so there is a risk of data leakage.Besides

the channel-based data access control mechanism does not apply to some fine-grained privacy protection scenarios.To solve the problems of data privacy and security involved in the consortium chain Hyperledger mentioned above

a blockchain data access control scheme based on the CP-ABE algorithm was proposed.Based on the original existing Fabric-CA module in the Hyperledger

our scheme can realize the secure distribution of user attribute keys in the CP-ABE scheme while implementing the fine-grained security access control of blockchain data at the user level.The security analysis shows that the scheme achieves the security goals of ABE user attribute private key security distribution and data privacy protection.The performance analysis also shows that the proposed scheme has good usability.

关键词

Keywords

references

ANDROULAKI E , BARGER A , BORTNIKOV V , et al . Hyperledger fabric:a distributed operating system for permissioned blockchains [C ] // European Conference on Computer Systems , 2018 ： 1 - 15 .

NAKAMOTO S . Bitcoin:a peer-to-peer electronic cash system [R ] . 2008 .

WOOD G . Ethereum:a secure decentralised generalised transaction ledger [R ] . 2014 .

闫莺 , 郑凯 , 郭众鑫 . 以太坊技术详解与实战 [M ] . 北京 : 机械工业出版社 , 2018 .

YAN Y , ZHENG K , GUO Z X . Ethereum technical details and actual combat [M ] . Beijing : China Machine PressPress , 2018 .

陈剑雄 , 张董朱 . 深度探索区块链 Hyperledger 技术与应用 [M ] . 北京 : 机械工业出版社 , 2018 .

CHEN J X , ZHANG D Z . In-depth exploration of blockchain hyperledger technology and application [M ] . BeiJing : China Machine PressPress , 2018 .

Channels . Hyperledger fabric channels [EB ] .

Enccc_example . 2019 Hyperledger fabric enccc_example [EB ] .

Private data . 2019 Hyperledger fabric private data [EB ] .

沈鑫 , 裴庆祺 , 刘雪峰 . 区块链技术综述 [J ] . 网络与信息安全学报 , 2016 , 2 ( 11 ): 11 - 20 .

SHEN X , PEI Q Q , LIU X F . Survey of block chain [J ] . Chinese Journal of Network and Information Security , 2016 , 2 ( 11 ): 11 - 20 .

JAKOBSSON M , JUELS A . Proofs of work and bread pudding protocols.in secure information networks:communications and multimedia security [C ] // IFIP TC6/TC11 Joint Working Conference on Communications and Multimedia Security (CMS '99) . 1999 .

VASIN P . Blackcoin’s proof-of-stake protocol v2 [EB ] .

KING S , NADAL S . PPCoin:peer-to-peer crypto-currency with proof-of-stake [J ] . Self-published Paper , 2012 ( 8 ):19.

YE C , . Analysis of security in blockchain:case study in 51%-attack detecting [C ] // 2018 5th International Conference on Dependable Systems and Their Applications (DSA) . 2018 .

章峰 , 史博轩 , 蒋文保 . 区块链关键技术及应用研究综述 [J ] . 网络与信息安全学报 , 2018 , 4 ( 4 ): 26 - 33 .

ZHANG F , SHI B X , JIANG W B . Review of key technology and its application of blockchain [J ] . Chinese Journal of Network and Information Security , 2018 , 4 ( 4 ): 26 - 33 .

中国信息通信研究院 . 区块链白皮书 [R ] . 2018 .

China Academy of Information and Communication Technology . White paper of blockchain [R ] . 2018 .

SUKHWANI H , MARTINEZ J M , CHANG X , et al . Performance modeling of PBFT consensus process for permissioned blockchain network (Hyperledger Fabric) [C ] // Symposium on Reliable Distributed Systems . 2017 : 253 - 255 .

KREPS J , NARKHEDE N , RAO J . Kafka:a distributed messaging system for log processing [C ] // The NetDB . 2011 ( 11 ): 1 - 7 .

Certificate Authorities . 2019 Hyperledger fabric certificate authorities [EB ] .

GOYAL V , PANDEY O , SAHAI A , et al . Attribute-based encryption for fine-grained access control of encrypted data [C ] // Symposium on Computer and Communications Security . 2006 : 89 - 98 .

BOLDYREVA A , GOYAL V , KUMAR V , et al . Identity-based encryption with efficient revocation [C ] // Symposium on Computer and Communications Security . 2008 : 417 - 426 .

林素青 . 支持访问更新的可验证外包属性加密方案 [J ] . 网络与信息安全学报 , 2019 , 5 ( 1 ): 41 - 53 .

LIN S Q . Verifiable outsourced attribute-based encryption with access update [J ] . Chinese Journal of Network and Information Security , 2019 , 5 ( 1 ): 41 - 53 .

BETHENCOURT J , SAHAI A , WATERS B . Ciphertext-policy attribute-based encryption [C ] // IEEE symposium on security and privacy (SP'07) . 2007 .

张兴兰 , 崔遥 . 基于群签名的属性加密方案 [J ] . 网络与信息安全学报 , 2019 , 5 ( 1 ): 19 - 25 .

ZHANG X L , CU Y . Attribute-based encryption schema with group signatures [J ] . Chinese Journal of Network and Information Security , 2019 , 5 ( 1 ): 19 - 25 .

Views

1395

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Ring adaptor signature scheme based on SM2 digital signature algorithm

Survey of decentralized public key infrastructure

Chameleon hash function based on SM3 and its applications

Blockchain smart contract vulnerability detection based on GR algorithm

Design of reputation-driven blockchain sharding consensus and incentive mechanism

Related Author

Xu Xinyue

Xu Shujiang

Wang Lianhai

Zhang Shuhui

Shao Wei

Wang Qizheng

SHI Chaoming

YAN Zheng

Related Institution

Shandong Provincial Key Laboratory of Industrial Network and Information System Security, Shandong Fundamental Research Center for Computer Science

Key Laboratory of Computing Power Network and Information Security, Ministry of Education, Shandong Computer Science Center (National Supercomputer Center in Jinan), Qilu University of Technology (Shandong Academy of Sciences)

Shield Lab, Trustworthiness Lab, Huawei Technologies Co., Ltd.

State Key Laboratory of Integrated Services Network, Xidian University, Xi’ an

School of Cyber Engineering, Xidian University, Xi’ an

⁰