支持位置验证和策略变更的属性加密方案

doi:10.3969/j.issn.1001-2400.2017.02.011

西安电子科技大学学报

支持位置验证和策略变更的属性加密方案

应作斌;马建峰;崔江涛

(西安电子科技大学计算机学院，陕西西安 710071)

收稿日期:2016-03-09 出版日期:2017-04-20 发布日期:2017-05-26
作者简介:应作斌(1982-)，男，西安电子科技大学博士研究生，E-mail: yingzb82@163.com
基金资助:
国家自然科学基金重点资助项目(U1405255)；国家自然科学基金资助项目(61502248)

Attribute-based encryption with location verification and policy adjusting supporting the cloud mobile office

YING Zuobin;MA Jianfeng;CUI Jiangtao

(School of Computer Science and Technology, Xidian Univ., Xi'an 710071, China)

Received:2016-03-09 Online:2017-04-20 Published:2017-05-26

摘要/Abstract

摘要：

针对云存储移动办公环境中存在用户的位置隐私泄露以及云端密文的访问策略无法直接变更的问题，提出了一种支持位置验证和策略变更的密文策略属性加密方案．使用BGV(Brakerski-Gentry-Vaikuntanathan)同态加密保护用户的位置隐私；使用数据拥有者生成的变更私钥对云端密文中的访问策略进行直接变更．此外，考虑到移动设备的续航能力有限，将BGV同态的计算、解密以及云端密文的变更计算部分外包给云及认证服务器．实验结果表明，该方案可以极大地节省用户的计算开销．

关键词: 密文策略属性加密, BGV同态加密, 位置验证, 策略变更

Abstract:

Facing the problems of the users' location privacy leakage and the indirect adjusting policies of the ciphertext stored in the cloud, in a mobile officie environment with cloud, a Ciphertext-Policy Attribute-Based Encryption with the Location Verification and Policy Adjusting (LVPA-CP-ABE) scheme is proposed. In the scheme, we apply BGV (Brakerski-Gentry-Vaikuntanathan) homomorphic encryption to protect the users' location privacy and updating key generated by the data owner directly to adjust the policy of the ciphertext stored in the cloud in the meantime. Moreover, in consideration of the endurance of mobile devices, the idea of outsourcing the BGV computation and BGV decryption as well as the ciphertext adjusting part is also introduced. The simulation indicates that our scheme is highly efficient in terms of users' computational cost.

Key words: ciphertext-policy attribute-based encryption, BGV homomorphic encryption, location verification, policy adjusting

应作斌;马建峰;崔江涛. 支持位置验证和策略变更的属性加密方案[J]. 西安电子科技大学学报, 2017, 44(2): 57-62+190.

YING Zuobin;MA Jianfeng;CUI Jiangtao. Attribute-based encryption with location verification and policy adjusting supporting the cloud mobile office[J]. Journal of Xidian University, 2017, 44(2): 57-62+190.

参考文献

［1］ YANG Y, LIU J K, LIANG K, et al. Extended Proxy-assisted Approach: Achieving Revocable Fine-grained Encryption of Cloud Data［C］//Lecture Notes in Computer Science: 9327. Berlin: Springer Verlag, 2015: 146-166.
［2］ SAHAI A, WATERS B. Fuzzy Identity-based Encryption［C］//Lecture Notes in Computer Science: 3494. Berlin: Springer Verlag, 2005: 457-473.
［3］ GOYAL V, PANDEY O, SAHAI A, et al. Attribute-based Encryption for Fine-grained Access Control of Encrypted Data［C］//Proceedings of the ACM Conference on Computer and Communications Security. New York: ACM, 2006: 89-98.
［4］ BETHENCOURT J, SAHAI A, WATERS B. Ciphertext-policy Attribute-based Encryption［C］//Proceedings of the IEEE Symposium on Security and Privacy. Piscataway: IEEE, 2007: 321-334.
［5］ WATERS B. Ciphertext-policy Attribute-based Encryption: an Expressive, Efficient, and Provably Secure Realization［C］//Lecture Notes in Computer Science: 6571. Berlin: Springer Verlag, 2011: 53-70.
［6］ YANG K, JIA X, REN K. Secure and Verifiable Policy Update Outsourcing for Big Data Access Control in the Cloud［J］. IEEE Transactions on Parallel ＆ Distributed Systems, 2015, 26(12): 3461-3470.
［7］应作斌, 马建峰, 崔江涛. 支持动态策略更新的半策略隐藏属性加密方案［J］. 通信学报, 2015, 36(12): 178-189.
YING Zuobin, MA Jianfeng, CUI Jiangtao. Partially Policy Hidden CP-ABE Supporting Dynamic Policy Updating ［J］. Journal on Communications, 2015, 36(12): 178-189.
［8］ GENTRY C. Fully Homomorphic Encryption Using Ideal Lattices［C］//Proceedings of the Annual ACM Symposium on Theory of Computing. New York: ACM, 2009: 169-178.
［9］ BRAKERSKI Z, GENTRY C, VAIKUNTANATHAN V. (Leveled) Fully Homomorphic Encryption without Bootstrapping［J］. ACM Transactions on Computation Theory, 2014, 6(3): 13.
［10］ HALEVI S, SHOUP V. Design and Implementation of a Homomorphic-encryption Library［J］. ［EB/OL］. ［2015-10-11］. http://www.doc88.com/p-9012353741450.html.
［11］ MATTHEW G,JOSEPH A. Libfenc Library beta 0.2 Release. ［EB/OL］. ［2015-10-11］. https://code.google.com/p/libfenc/downloads/detail?name=fenc-0.2.0.tar.gz＆can=2＆q=.

支持位置验证和策略变更的属性加密方案

Attribute-based encryption with location verification and policy adjusting supporting the cloud mobile office

PDF (PC)

赞

可视化

被引次数

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 0

Metrics

本文评价

推荐阅读 10