1. 中国科学院信息工程研究所信息安全国家重点实验室,北京 100093
2. 中国科学院大学,北京100049
[ "林素青(1982-),女,浙江温州人,中国科学院信息工程研究所博士生,主要研究方向为信息安全、密码学。" ]
网络首发:2016-05,
纸质出版:2016-05-15
移动端阅览
林素青. 支持策略更新的外包属性加密[J]. 网络与信息安全学报, 2016,2(5):39-49.
Su-qing LIN. Outsourced attribute-based encryption with policy update[J]. Chinese Journal of Network and Information Security, 2016, 2(5): 39-49.
林素青. 支持策略更新的外包属性加密[J]. 网络与信息安全学报, 2016,2(5):39-49. DOI: 10.11959/j.issn.2096-109x.2016.00055.
Su-qing LIN. Outsourced attribute-based encryption with policy update[J]. Chinese Journal of Network and Information Security, 2016, 2(5): 39-49. DOI: 10.11959/j.issn.2096-109x.2016.00055.
摘 要:为满足云存储密态数据高效灵活的访问需求,提出支持策略更新的外包属性加密方案。以经典的属性加密方案为基础模块,采用类密钥盲化方法和外包解密技术,在确保明文数据和用户私钥不泄露的条件下,实现密文访问策略的代理更新,同时切实有效地降低终端用户的解密计算量。方案支持非单调的访问结构,在标准模型和假设下可证明具有选择 IND-CPA 安全性和私钥安全性,与文献同类方案相比,实现了安全性和终端访问效率的进一步优化。
In order to achieve the efficient and flexible access control for the encrypted data stored in the cloud
an outsourced attribute-based encryption scheme with policy update was proposed.Based on the standard attribute-based encryption scheme
the functionality of policy update from delegation for a ciphertext without revealing any confidential information of the plaintext and private keys by utilizing the techniques of key blinding and outsourcing decryption was accomplished.Simultaneously
the decryption overhead for a user to recover the plaintext was effectively reduced.The scheme supports non-monotonic access structure and can be proved to have selective IND-CPA security and private key security under standard assumptions
respectively
in the standard model.Compared with similar schemes from literatures
the scheme provides better security and efficiency.
SAHAI A , WATERS B . Fuzzy identity-based encryption [C ] // International Conference on Theory and Applications of Cryptographic Techniques . c2005 : 457 - 473 .
LIANG X , CAO Z , LIN H , et al . Attribute based proxy re-encryption with delegating capabilities [C ] // The 4th International Symposium on Information,Computer,and Communications Security,ACM . c2009 : 276 - 286 .
CHEUNG L , NEWPORT C . Provably secure ciphertext policy ABE [C ] // The 14th ACM conference on Computer and Communications Security . c2007 : 456 - 465 .
LUO S , HU J , CHEN Z . Ciphertext policy attribute-based proxy re-encryption [C ] // The 12th Information and Communications Security . c2010 : 401 - 415 .
HOHENBERGER S , WATERS B . Attribute-based encryption with fast decryption [M ] // Public-Key Cryptography-PKC 2013.Berlin:Springer . 2013 : 162 - 179 .
GREEN M , HOHENBERGER S , WATERS B . Outsourcing the Decryption of ABE Ciphertexts [C ] // USENIX Security Symposium . c2011 .
GOYAL V , PANDEY O , SAHAI A , et al . Attribute-based encryption for fine-grained access control of encrypted data [C ] // The 13th ACM Conference on Computer and Communications Security . c2006 : 89 - 98 .
LEWKO A , OKAMOTO T , SAHAI A , et al . Fully secure functional encryption:attribute-based encryption and (hierarchical) inner product encryption [C ] // Advances in Cryptology-EUROCRYPT . c2010 : 62 - 91 .
WATERS B , . Ciphertext-policy attribute-based encryption:An expressive,efficient,and provably secure realization [C ] // Public Key Cryptography-PKC . c2011 : 53 - 70 .
LAI J , DENG R H , GUAN C , et al . Attribute-based encryption with verifiable outsourced decryption [J ] . Information Forensics and Security , 2013 , 8 ( 8 ): 1343 - 1354 .
LIN S , ZHANG R , MA H , et al . Revisiting attribute-based encryption with verifiable outsourced decryption [J ] . Information Forensics and Security , 2015 , 10 ( 10 ): 2119 - 2130 .
LI J , JIA C , LI J , et al . Outsourcing encryption of attribute-based encryption with mapreduce [C ] // The 14th Information and Communications Security . c2012 : 191 - 201 .
LI J , CHEN X , LI J , et al . Fine-grained access control system based on outsourced attribute-based encryption [C ] // Computer Security-ESORICS . c2013 : 592 - 609 .
LI J , HUANG X , LI J , et al . Securely outsourcing attribute-based encryption with checkability [J ] . Parallel and Distributed Systems , 2014 , 25 ( 8 ): 2201 - 2210 .
MA H , ZHANG R , WAN Z , et al . Verifiable and exculpable outsourced attribute-based encryption for access control in cloud computing [J ] . IEEE Transactions on Parallel and Distributed Systems , 2015 :1.
HOHENBERGER S , WATERS B . Online/offline attribute-based encryption [C ] // Public-Key Cryptography–PKC 2014 . Berlin:Springer , 2014 : 293 - 310 .
ROUSELAKIS Y , WATERS B . Practical constructions and new proof methods for large universe attribute-based encryption [C ] // The 2013 ACM SIGSAC Conference on Computer & Communications Security . c2013 : 463 - 474 .
SHAO J , LU R , LIN X . Fine-grained data sharing in cloud computing for mobile devices [C ] // Computer Communications (INFOCOM) . c2015 : 2677 - 2685 .
BEIMEL A , . Secure schemes for secret sharing and key distribution [M ] // Israel Institute of Technology . Haifa:Technion , 1996 .
LIANG K , SUSILO W . Searchable attribute-based mechanism with efficient data sharing for secure cloud storage [J ] . IEEE Transactions on Information Forensics and Security , 2015 , 10 ( 9 ): 1981 - 1992 .
LIIN S , ZHANG R , WANG M . Verifiable attribute-based proxy re-encryption for secure public cloud data sharing [J ] . Security and Communication Networks , 2016 .
0
浏览量
130
下载量
0
CSCD
关联资源
相关文章
相关作者
相关机构
京公网安备11010802024621