

浏览全部资源
扫码关注微信
1.深圳技术大学大数据与互联网学院,广东 深圳 518118
2.深圳大学应用技术学院,广东 深圳 518060
3.空天信息安全与可信计算教育部重点实验室,武汉大学国家网络安全学院,湖北 武汉 430072
4.西安邮电大学网络空间安全学院,陕西 西安 710121
Received:29 April 2024,
Revised:2024-09-11,
Published:25 February 2025
移动端阅览
王树兰, 甘竞宏, 赵陈斌, 等. 可支持公平验证的数据群组灵活协同共享方案[J]. 网络与信息安全学报, 2025, 11(1): 40-53.
WANG S L, GAN J H, ZHAO C B, et al. Flexible and collaborative data group sharing scheme with fairness and verifiability[J]. Chinese Journal of Network and Information Security, 2025, 11(1): 40-53.
王树兰, 甘竞宏, 赵陈斌, 等. 可支持公平验证的数据群组灵活协同共享方案[J]. 网络与信息安全学报, 2025, 11(1): 40-53. DOI: 10.11959/j.issn.2096-109x.2025005.
WANG S L, GAN J H, ZHAO C B, et al. Flexible and collaborative data group sharing scheme with fairness and verifiability[J]. Chinese Journal of Network and Information Security, 2025, 11(1): 40-53. DOI: 10.11959/j.issn.2096-109x.2025005.
随着云服务的快速发展,数据的共享和传播受到了广泛关注。基于属性的条件代理重加密(attribute-based conditional proxy re-encryption
AB-CPRE)能安全且高效地实现数据群组共享和传播而被广泛应用。然而,现有的AB-CPRE方案无法实现同一组内多个数据传播者协同将数据传播给新的用户组,仅支持单一数据传播者,灵活性差。此外,现有方案中用户生成验证值所需的计算开销随着密文中属性数增加而增加,导致云服务器和用户之间的公平验证效率低。针对上述不足,提出一种可支持公平验证的数据群组灵活协同共享方案。该方案构造了一种协同传播树结构,以实现同一组内多个数据传播者协同将数据传播给新用户组。此外,该方案设计了计算开销恒定的验证值生成机制,使用户仅需常数级计算开销即可生成验证值,从而高效实现云服务器和用户间的公平可验证。最后,形式化安全性证明和性能评估表明,所提方案是可证明安全和公平可验证的,并在验证值生成、重加密密钥生成和解密阶段比现有方案高效。
With the rapid development of cloud services
data sharing and dissemination have received widespread attention. Attribute-based conditional proxy re-encryption (AB-CPRE) has been widely used as a secure and efficient method to achieve group data sharing and dissemination. However
existing AB-CPRE schemes were unable to support multiple data disseminators within the same group to collaboratively disseminate data to new user groups
as only a single data disseminator was permitted
which limited flexibility. Additionally
in these schemes
the computation cost for users to generate proofs increased with the number of attributes in the ciphertext
resulting in low efficiency in ensuring fairness and verifiability between the cloud server and the user. To address these shortcomings
a flexible and collaborative data group sharing scheme with fairness and verifiability was proposed. A collaborative dissemination tree was designed to enable multiple data disseminators within the same group to collaboratively disseminate data to new user groups. Furthermore
the proposed scheme incorporated a constant-cost proof generation mechanism
allowing users to generate proofs with constant computation cost
thereby ensuring efficient fairness and verifiability between the cloud server and the user. Formal security proofs and performance evaluations demonstrate that the proposed scheme is provably secure
fair
and verifiable. It is shown to offer greater efficiency in proof generation
re-encryption key generation
and decryption phases compared to existing schemes.
葛文婷 , 李卫海 , 俞能海 . 基于属性加密的块级云数据去重方案 [J ] . 网络与信息安全学报 , 2023 , 9 ( 5 ): 106 - 115 .
GE W T , LI W H , YU N H . Block level cloud data deduplication scheme based on attribute encryption [J ] . Chinese Journal of Network and Information Security , 2023 , 9 ( 5 ): 106 - 115 .
ZHANG J , SU S , ZHONG H , et al . Identity-based broadcast proxy re-encryption for flexible data sharing in VANETs [J ] . IEEE Transactions on Information Forensics and Security , 2023 , 18 : 4830 – 4842 .
QIU J , HWANG G , LEE H . Efficient conditional proxy re-encryption with chosen-ciphertext security [C ] // Proceedings of 2014 Ninth Asia Joint Conference on Information Security , Berlin : Springer , 2014 : 104 - 110 .
HU H , ZHOU Y , Z C , et al . Efficient and HRA secure universal conditional proxy re-encryption for cloud-based data sharing [J ] . Applied Sciences , 2022 , 12 ( 19 ): 9586 - 9600 .
XU P , JIAO T , WU Q , et al . Conditional identity-based broadcast proxy re-encryption and its application to cloud email [J ] . IEEE Transactions on Computers , 2016 , 65 ( 1 ): 66 - 79 .
CUI J , LI B , ZHONG H , et al . Achieving revocable attribute group-based encryption for mobile cloud data: a multi-proxy assisted approach in VANETs [J ] . IEEE Transactions on Dependable and Secure Computing , 2023 , 20 ( 4 ): 2988 - 3001 .
SUN J , XU G , ZHANG T , et al . Verifiable, fair and privacy-preserving broadcast authorization for flexible data sharing in clouds [J ] . IEEE Transactions on Information Forensics and Security , 2023 , 18 : 683 - 698 .
GE C , SUSILO W , BAEK J , et al . A verifiable and fair attribute-based proxy re-encryption scheme for data sharing in clouds [J ] . IEEE Transactions on Dependable and Secure Computing , 2022 , 19 ( 5 ): 2907 - 2919 .
刘尚 , 郭银章 . 云计算多授权中心CP-ABE代理重加密方案 [J ] . 网络与信息安全学报 , 2022 , 8 ( 3 ): 176 - 188 .
LIU S , GUO Y Z . Multi-authority based CP-ABE proxy re-encryption scheme for cloud computing [J ] . Chinese Journal of Network and Information Security , 2022 , 8 ( 3 ): 176 - 188 .
GE J , WEN M , WANG L , et al . Attribute-based collaborative access control scheme with constant ciphertext length for smart grid [J ] . IEEE International Conference on Communications , 2022 : 540 - 546 .
HE Y , WANG H , LI Y , et al . An efficient ciphertext-policy attribute-based encryption scheme supporting collaborative decryption with blockchain [J ] . IEEE Internet of Things Journal , 2022 , 9 ( 4 ): 2722 – 2733 .
XUE Y , XUE K , GAI N , et al . An attribute-based controlled collaborative access control scheme for public cloud storage [J ] . IEEE Transactions on Information Forensics and Security , 2019 , 14 ( 11 ): 2927 - 2942 .
CHEN N , LI J , ZHANG Y , et al . Efficient CP-ABE scheme with shared decryption in cloud storage [J ] . IEEE Transactions on Computers , 2022 , 71 ( 1 ): 175 - 184 .
MADANI M A , KERKRI A , AISSAOUI M . MC-ABAC:an ABAC-based model for collaboration in multi-cloud environment [J ] . International Journal of Advanced Computer Science and Applications , 2023 , 14 ( 6 ): 1182 - 1190 .
ZHANG Y , LI B , LIU B , et al . An attribute-based collaborative access control scheme using blockchain for IoT devices [J ] . Electronics , 2020 , 9 ( 2 ): 285 - 307 .
LI X , WANG H , MA S , et al . Revocable and verifiable weighted attribute-based encryption with collaborative access for electronic health record in cloud [J ] . Cybersecurity , 2024 , 7 ( 18 ): 2523 - 3246 .
HUANG Q , YANG Y , FU J . Secure data group sharing and dissemination with attribute and time conditions in public cloud [J ] . IEEE Transactions on Services Computing , 2021 , 14 ( 4 ): 1013 - 1025 .
HUANG Q , YANG Y , YUE W , et al . Secure data group sharing and conditional dissemination with multi-owner in cloud computing [J ] . IEEE Transactions on Cloud Computing , 2021 , 9 ( 4 ): 1607 - 1618 .
DENG H , ZHANG J , QIN Z , et al . Policy based broadcast access authorization for flexible data sharing in clouds [J ] . IEEE Transactions on Dependable and Secure Computing , 2022 , 19 ( 5 ): 3024 - 3037 .
JIANG L , ALAZAB M , QIN Z . Secure task distribution with verifiable re-encryption in mobile-crowdsensing-assisted emergency IoT system [J ] . IEEE Internet of Things Journal , 2024 , 11 ( 3 ): 3896 - 3908 .
XIE C , SHI R , ZHANG X , et al . Verifiable outsourcing emrs scheme with attribute-based encryption in cloud-edge environments [J ] . Journal of Information Security and Applications , 2023 , 76 : 103526 - 103538 .
0
Views
49
下载量
0
CSCD
Publicity Resources
Related Articles
Related Author
Related Institution
京公网安备11010802024621