云计算中支持有效用户撤销的多授权方基于属性加密方案

张亮轩; 李晖

doi:10.11959/j.issn.2096-109x.2016.00023

您当前的位置：

首页 >

文章列表页 >

云计算中支持有效用户撤销的多授权方基于属性加密方案

学术论文 | 更新时间：2024-06-03

- 云计算中支持有效用户撤销的多授权方基于属性加密方案
- Multi-authority attribute-based encryption with efficient user revocation in cloud computing
- 网络与信息安全学报 2016年2卷第2期页码：62-74
- 作者机构：
  
  1. 西安电子科技大学综合业务网理论与关键技术国家重点实验室，陕西西安 710071
  2. 西安电子科技大学网络与信息安全学院,陕西西安 710071
- 作者简介：
  
  [ "张亮轩（1991-），男，陕西西安人，西安电子科技大学硕士生，主要研究方向为密码学、云计算安全。" ]
  [ "李晖（1968-），男，河南灵宝人，博士，西安电子科技大学教授、博士生导师，主要研究方向为密码学、无线网络安全、云计算安全、信息论与编码理论。" ]
- 基金信息：
  
  国家自然科学基金—广东联合基金资助项目;The National Natural Science Foundation of China—Guangdong Provincial People’s Government of the Joint Natural Science Fund Projects(U1401251);国家自然科学基金资助项目;The National Natural Science Foundation of China(61272457)
- DOI：10.11959/j.issn.2096-109x.2016.00023
  中图分类号： TP309.7
- 网络首发：2016-02，
  
  纸质出版：2016-02-15
- 稿件说明：
移动端阅览
张亮轩, 李晖. 云计算中支持有效用户撤销的多授权方基于属性加密方案[J]. 网络与信息安全学报, 2016,2(2):62-74.

Liang-xuan ZHANG, Hui LI. Multi-authority attribute-based encryption with efficient user revocation in cloud computing[J]. Chinese Journal of Network and Information Security, 2016, 2(2): 62-74.
张亮轩, 李晖. 云计算中支持有效用户撤销的多授权方基于属性加密方案[J]. 网络与信息安全学报, 2016,2(2):62-74. DOI： 10.11959/j.issn.2096-109x.2016.00023.

Liang-xuan ZHANG, Hui LI. Multi-authority attribute-based encryption with efficient user revocation in cloud computing[J]. Chinese Journal of Network and Information Security, 2016, 2(2): 62-74. DOI： 10.11959/j.issn.2096-109x.2016.00023.

摘要

提出了一个支持有效用户撤销的多授权方基于属性加密方案，每个用户都拥有一个“混合解密密钥”用于实现有效的用户撤销。与现有的方案相比，该方案在进行用户撤销时更加有效。除此以外，该方案还能实现用户的动态权限管理，在云端进行部分数据外包加密，密文部分解密，在期限过后已分享的数据可自我销毁。

Abstract

An efficient user revocable multi-authority ABE scheme was proposed

a “hybrid decryption key” for each user isused to achieve efficient user revocation.Comparing with the existing schemes

this scheme is more effective in user revocation.In addition

the scheme can also achieve user dynamic privileges management

partial data outsource encryption and ciphertext partially decrypted in the cloud server and shared data self-destruction after expiration.

关键词

Keywords

references

GOYAL V , PANDEY O , SAHAI A , et al . Attribute-based encryp-tion for fine-grained access control of encrypted data [C ] // CCS’06,ACM . c 2006 : 89 - 98 .

BETHENCOURT J , SAHAI A , WATERS B . Ciphertext-policy attribute-based encryption [C ] // S＆P’07,IEEE , c 2007 : 321 - 334 .

WATERS B . Ciphertext-policy attribute-based encryption:an ex-pressive,efficient,and provably secure realization [C ] // PKC’11,Berlin:Springer . c 2011 : 53 - 70 .

LEWKO A B , OKAMOTO T , SAHAI A , et al . Fully secure func-tional encryption:attribute-based encryption and (hierarchical) in-ner product encryption [C ] // EUROCRYPT’10,Berlin:Springer . c 2010 : 62 - 91 .

LEWKO A B , WATERS B . Decentralizing attribute-based encryp-tion [C ] // EUROCRYPT’11,Berlin:Springer . c 2011 : 568 - 588 .

LI Q , MA J , LI R , et al . Large universe decentralized key-policy attribute-based encryption [J ] . Security and communication Net-works , 2014 , 8 ( 3 ): 501 - 509 .

CHEUNG L , NEWPORT C C . Provably secure ciphertext policy ABE [C ] // The 14th ACM Conference on Computer and Communi-cations Security ACM . c 2007 : 456 - 465 .

OSTROVSKY R , SAHAI A , WATERS B . Attribute-based encryp-tion with non-monotonic access structures [C ] // The 14th ACM on Computer and Communications Security . c 2007 : 195 - 203 .

YU S , WANG C , REN K , et al . Achieving secure,scalable,and fine-grained data access control in cloud computing [C ] // The 29th IEEE Internet Conference Computer Communication . c 2010 : 1 - 9 .

TYSOWSKI P , HASAN M . Hybrid attribute and re-encryption-based key management for secure and scalable mo-bile applications in clouds [C ] // IEEE Transactions Cloud Comput-ing . c 2013 : 172 - 186 .

CHASE M . Multi-authority attribute based encryption [C ] // Theory of Cryptography,Berlin:Springer-Verlag . 2007 : 515 - 534 .

CHASE M , CHOW S S M . Improving privacy and security in multi-authority attribute-based encryption [C ] // The 16th CCS . c 2009 : 121 - 130 .

LIN H , CAO Z , LIANG X , et al . Secure threshold multi authority attribute based encryption without a central authority [J ] . Informa-tion Sciences an International Journal . 2010 , 180 ( 13 ): 2618 - 2632 .

BOŽOVIĆ V , SOCEK D , STEINWANDT R , et al . Multi-authority attribute-based encryption with honest-but-curious central author-ity [J ] . International Journal of Computer Mathematics . 2011 , 90 ( 3 ): 268 - 283 .

LI F , RAHULAMATHAVAN Y , RAJARAJAN M , et al . Low com-plexity multi-authority attribute based encryption scheme for mo-bile cloud computing [C ] // The 7th SOSE,IEEE . c 2013 : 573 - 577 .

YANG K , JIA X , REN K , et al . DAC-MACS:Effective data access control for multi-authority cloud storage systems [C ] // The IEEE INFOCOM . c 2013 : 2895 - 2903 .

YU S , WANG C , REN K , et al . Secure,efficient and fine-grained data access control mechanism for p2p storage cloud [C ] // IEEE Transactions on Cloud Computing . c 2010 : 261 - 270 .

RUJ S , STOJMENOVIC M , NAYAK A . Decentralized access control with anonymous authentication of data stored in clouds [C ] // IEEE Trans.Parallel and Distributed Systems . c 2014 : 384 - 394 .

YANG K , JIA X H . Expressive,efficient,and revocable data access control for multi-authority cloud storage [C ] // IEEE Trans Parallel and Distributed Systems . c 2014 : 1735 - 1744 .

HE H , LI R X , DONG X H , et al . Secure,efficient and fine-grained data access control mechanism for p2p storage cloud [C ] // IEEE Transactions on Cloud Computing . c 2014 : 471 - 484 .

BINBUSAYYIS A , ZHANG N . Decentralized attribute-based encryption scheme with scalable revocation for sharing data in public cloud servers [C ] // Cloud Technologies and Applications , c 2015 : 1 - 8 .

YANG K , JIA X H , REN K . Secure and verifiable policy update outsourcing for big data access control in the cloud [C ] // IEEE Trans.Parallel and Distributed Systems , c 2014 : 3461 - 3470 .

浏览量

128

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

自定义密钥的加密去重云存储访问控制方案

基于场景感知的访问控制模型

云计算多授权中心CP-ABE代理重加密方案

容器云中基于信号博弈的容器迁移与蜜罐部署策略

基于FANP的云用户行为信任评估优化机制