支持丰富访问控制策略的群组协作密文策略属性基加密

李洋; 刘江华; 伍玮

doi:10.11959/j.issn.2096-109x.2017.00141

您当前的位置：

首页 >

文章列表页 >

支持丰富访问控制策略的群组协作密文策略属性基加密

学术论文 | 更新时间：2024-06-03

- 支持丰富访问控制策略的群组协作密文策略属性基加密
- Group-oriented ciphertext-policy attribute-based encryption with expressive access policy
- 网络与信息安全学报 2017年3卷第5期页码：54-61
- 作者机构：
  
  1. 福建师范大学数学与计算机科学学院，福建福州 350007
  2. 福建省网络安全与密码技术重点实验室，福建福州 350007
- 作者简介：
  
  [ "李洋（1990-），男，安徽阜阳人，福建师范大学硕士生，主要研究方向为密码学和信息安全。" ]
  [ "刘江华（1988-），男，山西朔州人，福建师范大学硕士生，主要研究方向为密码学和信息安全。" ]
  [ "伍玮（1981-），女，回族，江苏南京人，博士，福建师范大学副教授、硕士生导师，主要研究方向为公钥密码。" ]
- 基金信息：
  
  国家自然科学基金资助项目;The National Natural Science Foundation of China(61402110);国家自然科学基金资助项目;The National Natural Science Foundation of China(61472083);福建师范大学校创新团队基金资助项目;The Innovation Team of Fujian Normal University(IRTL1207)
- DOI：10.11959/j.issn.2096-109x.2017.00141
  中图分类号： TP393
- 网络首发：2017-05，
  
  纸质出版：2017-05-15
- 稿件说明：
移动端阅览
李洋, 刘江华, 伍玮. 支持丰富访问控制策略的群组协作密文策略属性基加密[J]. 网络与信息安全学报, 2017,3(5):54-61.

Yang LI, Jiang-hua LIU, Wei WU. Group-oriented ciphertext-policy attribute-based encryption with expressive access policy[J]. Chinese Journal of Network and Information Security, 2017, 3(5): 54-61.
李洋, 刘江华, 伍玮. 支持丰富访问控制策略的群组协作密文策略属性基加密[J]. 网络与信息安全学报, 2017,3(5):54-61. DOI： 10.11959/j.issn.2096-109x.2017.00141.

Yang LI, Jiang-hua LIU, Wei WU. Group-oriented ciphertext-policy attribute-based encryption with expressive access policy[J]. Chinese Journal of Network and Information Security, 2017, 3(5): 54-61. DOI： 10.11959/j.issn.2096-109x.2017.00141.

摘要

在对传统的属性基加密研究的基础上，提出了一个支持面向群组协作的密文策略属性基加密方案。在方案中，访问控制策略由“与”和“或”逻辑门构成，用户被划分为不同的群组，只有来自同一群组的用户且他们的属性集合满足密文中的访问控制策略才能成功合作解密密文；针对来自不同群组的用户，即使他们的属性集合满足访问策略，也不能合作解密。定义了方案的算法和安全模型，并给出了具体的方案构造和安全性证明。

Abstract

Based on the study of the traditional attribute-based encryption

a scheme called group-oriented ciphertext-policy attribute-based encryption was proposed.In the scheme

the access policy consists of AND-gate and OR-gate.Users were split up into different groups.Users from the same group can merge their attributes to decrypt successfully

if the union of their attributes satisfies the access structure embedded in the ciphertext.But users from different groups cannot realize this cooperative decryption.A concrete construction and security model was given.Finally

the security proof for the proposed scheme was given.

关键词

Keywords

references

SAHAI A , WATERS B . Fuzzy identity-based encryption [C ] // The International Conference on Theory and Applications of Cryptographic Techniques . 2005 : 457 - 473 .

LI M T , HUANG X Y , LIU J K , et al . GOABE:group-oriented attribute-based encryption [C ] // The 8th International Conference on Network and System Security( NSS 2014) . 2014 : 260 - 270 .

BALU A , KUPPUSAMY K . An expressive and provably secure cipher-text-policy attribute-based encryption [J ] . Information Sciences , 2014 , 276 ( 4 ): 354 - 362 .

GOYAL V , PANDEY O , SAHAI A , et al . Attribute-based encryption for fine-grained access control of encrypted data [C ] // The 13th ACM Conference on Computer and Communications Security ( CCS 2006) . 2006 : 89 - 98 .

OSTROVSKY R , SAHAI A , WATERS B . Attribute-based encryption with non-monotonic access structures [C ] // The 14th ACM Conference on Computer and Communications Security ( CCS 2007) . 2007 : 195 - 203 .

ATTRAPADUNG N , LIBERT B , PANAFIEU E D . Expressive key-policy attribute-based encryption with constant-size ciphertexts [C ] // Public Key Cryptography ( PKC 2011) . 2011 : 90 - 108 .

GE A , ZHANG R , CHEN C , et al . Threshold ciphertext policy attribute-based encryption with constant size ciphertexts [C ] // The 17th Australasian Conference on Information Security and Privacy (ACISP 2012) . 2012 : 336 - 349 .

BOLDYREVA A , GOYAL V , KUMAR V . Identity-based encryption with efficient revocation [C ] // The 15th ACM Conference on Computer and Communications Security(CCS 2008) . 2008 : 417 - 426 .

YU S , WANG C , REN K , et al . Attribute based data sharing with attribute revocation [C ] // The 5th ACM Symposium on Information,Computer and Communications Security(ASIACCS 2010) . 2010 : 261 - 270 .

CHASE M , . Multi-authority attribute based encryption [C ] // The 4th Theory of Cryptography Conference (TCC 2006) . 2007 : 515 - 534 .

CHASE M , CHOW S S M . Improving privacy and security in multiauthority attribute-based encryption [C ] // The 16th ACM Conference on Computer and Communications Security (CCS 2009) . 2009 : 121 - 130 .

LI M , YU S , ZHENG Y , et al . Scalable and secure sharing of personal health records in cloud computing using attribute-based encryption [J ] . IEEE Transactions on Parallel and Distributed Systems , 2013 , 4 ( 1 ): 131 - 143 .

YAN H , LI X , LI J . Secure personal health record system with attribute-based encryption in cloud computing [C ] // The 9th International Conference on P2P,Parallel,Grid,Cloud and Internet Computing(3PGCIC) . 2014 : 329 - 332 .

BETHENCOURT J , SAHAI A , WATERS B . Ciphertext-policy attribute-based encryption [C ] // IEEE Symposium on Security and Privacy (SP 2007) . 2007 : 321 - 334 .

EMURA K , MIYAJI A , NOMURA A , et al . A ciphertextpolicy attribute-based encryption scheme with constant ciphertext length [J ] . International Journal of Applied Cryptography , 2009 , 5451 ( 1 ): 13 - 23 .

HERRANZ J , LAGUILLAUMIE F , RAFOLS C . Constant size ciphertexts in threshold attribute-based encryption [C ] // The 13th Internation Conference on Practice and Theory in Public Key Cryptography (PKC 2010) . 2010 : 19 - 34 .

CHEN C , ZHANG Z F , FENG D G . Efficient ciphertext policy attribute-based encryption with constant-size ciphertext and constant computation-cost [C ] // The 5th International Conference on Provable Security ( ProvSec) . 2011 : 84 - 101 .

YU S , WANG C , REN K , et al . Attribute based data sharing with attribute revocation [C ] // The 5th ACM Symposium on Information,Computer and Communications Security (ASIACCS’10) . 2010 : 261 - 270 .

LIANG X , LU R , LIN X . Ciphertext policy attribute based encryption with efficient revocation [C ] // IEEE Symposium on Security and Privacy . 2010 : 321 - 334 .

MULLER S , KATZENBEISSER S , et al . On multi-authority ciphertextpolicy attribute-based encryption [J ] . Bulletin of the Korean Mathematical Society , 2009 , 46 ( 4 ): 803 - 819 .

LIN H , CAO Z , LIANG X , et al . Secure threshold multi authority attribute based encryption without a central authority [J ] . Information Sciences , 2008 , 180 ( 13 ): 2618 - 2632 .

XHAFA F , LI J , ZHAO G , et al . Designing cloud-based electronic health record system with attribute-based encryption [J ] . Multimedia Tools and Applications , 2015 , 74 ( 10 ): 3441 - 3458 .

BEIMEL A . Secure schemes for secret sharing and key distribution [J ] . International Journal of Pure ＆Applied Mathematics , 1996 .

DAMGARD I , THORBEK R . Linear integer secret sharing and distributed exponentiation [C ] // The International Conference on Theory and Practice of Public-Key Cryptography . 2006 : 75 - 90 .

浏览量

2218

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于双联盟链的工业物联网安全数据共享架构

支持访问更新的可验证外包属性加密方案

基于群签名的属性加密方案

基于属性加密的云存储隐私保护机制研究

支持策略更新的外包属性加密