抗属性篡改的去中心化密文数据安全共享

doi:10.19665/j.issn1001-2400.2022.02.016

摘要/Abstract

摘要：

智能设备间的相互协同丰富了智能家居的各类应用,而设备间信息交互与共享使得用户的数据面临着窃取及篡改的安全威胁。基于密文策略的属性加密机制(CP-ABE),在对云服务商保密的同时实现了云端跨用户、设备的数据安全共享。但是,智能设备资源受限以及属性管理服务器单点失效的风险给传统的密文数据安全共享方法带来了严峻的挑战。为此,基于区块链和可验证外包解密技术,提出了一种基于区块链的去中心化的密文数据安全共享方案。该方法以属性中心为节点构建联盟链网络,通过区块链记录属性与密文信息,实现了用户属性的去中心化管理,保障了访问属性的不可篡改性。在此基础上,结合外包解密CP-ABE技术,减少了智能设备的计算量,提高了共享的效率。实验及分析结果表明,该方案在保证数据共享安全性的同时,能够有效降低智能设备的计算开销。

关键词: 智能家居, 数据共享, 区块链, 访问控制, 密文策略属性基加密

Abstract:

The cooperation between smart devices has greatly enriched various applications of smart homes.Due to the frequent information sharing between devices,users' data suffer from security threats such as data theft and tampering.The ciphertext-policy attribute-based encryption (CP-ABE) scheme realizes the secure sharing of cloud data across users and devices while keeping confidential to the cloud service provider.However,the limited resources of smart devices and the risk of a single point of failure in the attribute management server have brought serious challenges to the traditional secure sharing of ciphertext data.Therefore,we propose a decentralized ciphertext data security sharing scheme based on the block chain and outsourcing decryption CP-ABE.We construct a consortium blockchain network with attribute centers as nodes and record attribute and ciphertext information through the blockchain.The blockchain realizes the decentralized management on user’s attributes,on the basis of which,combined with the outsourcing decryption CP-ABE technology,the computation of smart devices is reduced and the efficiency of sharing is improved.Experimental and analytical results show that the scheme can reduce the computing burden of smart devices and ensure the security of data sharing.

Key words: smart home, data sharing, blockchain, access control, ciphertext-policy attribute-based encryption

中图分类号:

TP391

曾辉祥,习宁,谢晴晴,吕静,崔志浩,马建峰. 抗属性篡改的去中心化密文数据安全共享[J]. 西安电子科技大学学报, 2022, 49(2): 135-145.

ZENG Huixiang,XI Ning,XIE Qingqing,LV Jing,CUI Zhihao,MA Jianfeng. Decentralized ciphertext sharing based on blockchain[J]. Journal of Xidian University, 2022, 49(2): 135-145.

图/表 14

图1

图2

图3

图4

图5

图6

图7

表1

表2

表3

图8

图9

图10

图11

参考文献 17

[1]	ALAM M R, REAZ M B I, ALI M A M. A Review of Smart Homes-Past,Present,and Future[J]. IEEE Transactions on Systems,Man,and Cybernetics:Part C (Applications and Reviews), 2012, 42(6):1190-1203. doi: 10.1109/TSMCC.2012.2189204
[2]	ZUNGERU A M, GABOITAOLELWE J, DIARRA B, et al. A Secured Smart Home Switching System based on Wireless Communications and Self-Energy Harvesting[EB/OL].[2021-12-20]. DOI: 10.1109/ACCESS.2019.2900305. doi: 10.1109/ACCESS.2019.2900305
[3]	HANUMANTHAIAH A, ARIUN D, LIVA M L, et al. Integrated Cloud based Smart Home with Automation and Remote Controllability[C/OL].[2021-12-24].DOI: 10.1109/ICCES45898.2019.9002245. doi: 10.1109/ICCES45898.2019.9002245
[4]	FADHIL J A, OMAR O A, SARHAN Q I. A Survey on the Applications of Smart Home Systems[C/OL].[2021-12-22].DOI: 10.1109/CSASE48920.2020.9142103. doi: 10.1109/CSASE48920.2020.9142103
[5]	GOYAL V, PANDEY O, SAHAI A, et al. Attribute-Based Encryption for Fine-Grained Access Control of Encrypted Data[C/OL].[2021-12-25].DOI: 10.1145/1180405.1180418. doi: 10.1145/1180405.1180418
[6]	BETHENCOURT J, SAHAI A, WATERS B. Ciphertext-Policy Attribute- Based Encryption[C]// Proceedings of IEEE Symposium Security Privacy.Piscataway:IEEE, 2007:321-334.
[7]	LEWKO A, WATERS B. Decentralizing Attribute-Based Encryption[C]// Advances in Cryptology (Lecture Notes in Computer Science):vol.6632.Heidelberg:Springer-Verlag, 2011:568-588.
[8]	HAN J, SUSILO W, MU Y, et al. Improving Privacy and Security in Decentralized Ciphertext-Policy Attribute-Based Encryption[J]. IEEE Transactions on Information Forensics & Security, 2017, 10(3):665-678.
[9]	JEMEL M, SERHROUCHNI A. Decentralized Access Control Mechanism with Temporal Dimension Based on Blockchain[C]// 2017 IEEE 14th International Conference on e-Business Engineering (ICEBE).Piscataway:IEEE, 2017:177-182.
[10]	GAO S, PIAO G, ZHU J, et al. TrustAccess:A Trustworthy Secure Ciphertext-Policy and Attribute Hiding Access Control Scheme based on Blockchain[J]. IEEE Transactions on Vehicular Technology, 2020(99):1.
[11]	邱云翔, 张红霞, 曹琪, 等. 基于CP-ABE算法的区块链数据访问控制方案[J]. 网络与信息安全学报, 2020, 6(3):88-98.
	QIU Yunxiang, ZHANG Hongxia, CAO Qi, et al. Blockchain Data Access Control Scheme based on CP-ABE Algorithm[J]. Chinese Journal of Network and Information Security, 2020, 6(3):88-98.
[12]	FAN K, PAN Q, ZHANG K, et al. A Secure and Verifiable Data Sharing Scheme Based on Blockchain in Vehicular Social Networks[J]. IEEE Transactions on Vehicular Technology, 2020, 69(6):5826-5835. doi: 10.1109/TVT.2020.2968094
[13]	牛淑芬, 杨平平, 谢亚亚, 等. 区块链上基于云辅助的密文策略属性基数据共享加密方案[J]. 电子与信息学报, 2021, 43(7):1864-1871.
	NIU Shufen, YANG Pingping, XIE Yaya, et al. Cloud-Assisted Ciphertext Policy Attribute Based Encryption Data Sharing Encryption Scheme based on Block Chain[J]. Journal of Electronics & Information Technology, 2021, 43(7):1864-1871.
[14]	尚松超, 陈勃翰, 颜光伟, 等. 基于区块链的数据共享访问控制模型[J]. 通信技术, 2021, 54(12):2666-2673.
	SHANG Songchao, CHEN Bohan, YAN Guangwei, et al. Model for Data Sharing and Access Control based on Bolocechain[J]. Communications Technology, 2021, 54(12):2666-2673.
[15]	DAN B, FRANKLIN M. Identity-Based Encryption from the Weil Pairing[C]// Proceedings of Advances Cryptology.Heidelberg:Springer, 2001:213-229.
[16]	GRAMOLI V. From Blockchain Consensus Back to Byzantine Consensus[J]. Future Generation Computer Systems, 2020, 107:760-769. doi: 10.1016/j.future.2017.09.023
[17]	GAO S, YU T, ZHU J, et al. T-PBFT:An Eigentrust-Based Practical Byzantine Fault Tolerance Consensus Algorithm[J]. China Communications, 2019, 16(12):111-123. doi: 10.23919/JCC.2019.12.008

方案	数据机密性保护	防共谋攻击	防属性篡改攻击	数据完整性保护	防属性假冒攻击
文献[7]	√	√	×	√	√
文献[10]	√	√	√	√	×
文献[11]	√	√	×	√	×
文献[12]	√	√	×	√	√
文中方案	√	√	√	√	√

方案	私钥生成	加密	解密
文献[7]	2A_U	(5A_p+1)	3A_p(B+)
文献[10]	(A_U+1)	(A_p+2)	(A_p+1)B
文献[11]	(2+2A_U)	(4A_p+1)+	(2A_p+1)B
文献[12]	(2+2A_U)	(2A_p+1)+	2
文中方案	(2+2A_U)	(2A_p+1)+	2

方案	私钥	密文
文献[7]	(A_U+1)L	(3A_p+1)L
文献[10]	(A_U+1)L	(A_p+2)L
文献[11]	(2A_U+1)L	(2A_p+2)L
文献[12]	L	(2A_p+2)L
文中方案	(2A_U+1)L	(2A_p+2)L