区块链中可验证外包解密的匿名属性加密方案

doi:10.3778/j.issn.1002-8331.2107-0487

摘要/Abstract

摘要： 属性加密是云计算环境下实现数据机密性和细粒度访问控制的关键技术。然而，一般的属性加密方案中存在访问策略敏感信息泄露、解密成本高、属性授权机构权力过大等问题。为了解决上述问题，提出一种基于区块链的可验证外包解密的匿名属性加密方案。该方案使用策略隐藏保护敏感属性信息，通过两方共同生成完整属性密钥，在解密前进行属性匹配操作。利用区块链不可篡改性存储验证参数存储对第三方外包解密结果进行正确性验证，并使用区块链生成、存储属性证书。在随机谕言模型下证明了选择性密文策略和选择明文攻击的安全性，并与其他方案进行功能、通信开销对比，使用PBC Go密码学库对方案进行仿真，仿真结果表明该方案可以有效地减少用户解密开销。

关键词: 属性加密, 策略隐藏, 属性匹配, 外包解密, 区块链

Abstract: Ciphertext-policy attribute-based encryption（CP-ABE） is one of the key technology to achieve data confidentiality and fine-grained access control in a cloud environment. However, general CP-ABE schemes have some problems, such as the access policy sensitive information leakage, the high decryption cost and the too much power of attribute authority. In order to solve these problems, an anonymous attribute-based encryption scheme with verifiable outsourcing decryption based on blockchain（AVOCB-ABE） is proposed. The scheme uses policy-hiding idea to protect sensitive attribute information, uses both parties to generate the complete attribute key, and introduces attribute matching operation before decryption. In addition, the scheme uses the non-tampering feature of blockchain to storage verification parameters which can verify the outsourcing decryption results, the blockchain is used to generate and store attribute certificates. Finally, the security of selective ciphertext-policy and chosen-plaintext attacks is proved under the random oracle model, the scheme is compared with other schemes in function and communication overhead, simulated by using PBC Go cryptographic library, the results show that the scheme reduces the user’s decryption calculation.

Key words: attribute-based encryption, policy-hiding, attribute matching, outsourced decryption;blockchain

庄朝源, 郭瑞, 杨耿. 区块链中可验证外包解密的匿名属性加密方案[J]. 计算机工程与应用, 2022, 58(19): 124-134.

ZHUANG Chaoyuan, GUO Rui, YANG Geng. Anonymous Attribute?Based Encryption Scheme with Verifiable Outsourcing Decryption in Blockchain[J]. Computer Engineering and Applications, 2022, 58(19): 124-134.

参考文献

[1] SANDHU R S，SAMARATI P.Access control：Principle and practice[J].IEEE Communications Magazine，1994，32（9）：40-48.
[2] BETHENCOURT J，SAHAI A，WATERS B.Ciphertext-policy attribute-based encryption[C]//Proceedings of IEEE Symposium on Security & Privacy，2007：321-334.
[3] SAHAI A，WATERS B.Fuzzy identity-based encryption[C]//Proceedings of International Conference on Theory & Applications of Cryptographic Techniques，2005：457-473.
[4] GOYAL V，PANDEY O，SAHAIA，et al.Attribute-based encryption for fine-grained access control of encrypted data[C]//Proceedings of the 13th ACM Conference on Computer and Communications Security，2006：89-98.
[5] SI X L，WANG P P，ZHANG L W.KP-ABE based verifiable cloud access control scheme[C]//Proceedings of the 12th IEEE International Conference on Trust，Security and Privacy in Computing and Communications，2013：34-41.
[6] TOUATI L，CHALLAL Y.Collaborative KP-ABE for cloud-based internet of things applications[C]//Proceedings of the IEEE International Conference on Communications，2016：1-7.
[7] 闫玺玺，张棋超，汤永利，等.支持叛逆者追踪的密文策略属性基加密方案[J].信息网络安全，2019，19（5）：47-53.
YAN X X，ZHANG Q C，TANG Y L，et al.Ciphertext policy attribute-based encryption scheme supporting traitor tracing[J].Netinfo Security，2019，19（5）：47-53.
[8] ZHANG Y H，ZHENG D，CHEN X F，et al.Efficient attribute-based data sharing in mobile clouds[J].Pervasive and Mobile Computing，2016，28（1）：135-149.
[9] WATERS B.Ciphertext-policy attribute-based encryption：An expressive，efficient，and erovablysecure realization[C]//Proceedings of the 14th International Conference on Practice and Theory in Public Key Cryptography Conference on Public Key Cryptography，2011：53-70.
[10] MALLUHI Q M，SHIKFA A，TRINH V C.A ciphertext-policy attribute-based encryption scheme with optimized ciphertext size and fast decryption[C]//Proceedings of the 2017 ACM Conference，2017：230-240.
[11] NISHIDE T，YONEYAMA K，OHTA K.Attribute-based encryption with partially hidden encryptor-specified access structures[C]//Proceedings of the International Conference on Applied Cryptography & Network Security，2008：111-129.
[12] ZHANG Y H，CHEN X F，LI J，et al.Anonymous attribute-based encryption supporting efficient decryption test[C]//Proceedings of the 8th ACM SIGSAC Symposium on Information，Computer and Communications Security，2013：511-516.
[13] ZHOU Z B，HUANG D J，WANG Z J.Efficient privacy-preserving ciphertext-policy attribute based-encryption and broadcast encryption[J].IEEE Transactions on Computers，2014，64（1）：126-138.
[14] XIONG H，ZHAO Y N，PENG L，et al.Partially policy-hidden attribute-based broadcast encryption with secure delegation in edge computing[J].Future Generation Computer Systems，2019，97：453-461.
[15] ZHANG L Y，HU G C，MU Y，et al.Hidden ciphertext policy attribute-based encryption with fast decryption for personal health record system[J].IEEE Access，2019，7：33202-33213.
[16] ZENG P，ZHANG Z T，LU R X，et al.Efficient policy-hiding and large universe attribute-based encryption with public traceability for internet of medical things[J].IEEE Internet of Things Journal，2021，1（1）：99.
[17] LIU Y，DU R Z.Efficient partially policy-hidden with multi-authority for access control scheme in internet of things[C]//Proceedings of the 2020 International Conference on Networking and Network Applications，2020：357-380.
[18] GREEN M，HOHENBERGER S，WATERS B.Outsourcing the decryption of abe ciphertexts[C]//Proceedings of the 20th USENIX Conference on Security，2011：34.
[19] LAI J Z，DENG R H，GUAN C W，et al.Attribute-based encryption with verifiable outsourced decryption[J].IEEE Transactions on Information Forensics & Security，2013，8（8）：1343-1354.
[20] QIN B D，DENG R H，LIU S L，et al.Attribute-based encryption with efficient verifiable outsourced decryption[J].IEEE Transactions on Information Forensics and Security，2015，10（7）：1384-1393.
[21] 李聪，杨晓元，白平，等.可追责和完全可验证外包解CP-ABE方案[J].计算机应用，2018，38（8）：2249-2255.
LI C，YANG X Y，BAI P，et al.Traceable and fully verifiable for outsourced decryption for CP-ABE[J].Journal of Computer Applications，2018，38（8）：2249-2255.
[22] FAN K，XU H Y，GAO L X，et al.Efficient and privacy preserving access control scheme for fog-enabled IOT[J].Future Generation Computer Systems，2019，99：134-142.
[23] GUO R，ZHUANG C Y，SHI H X，et al.A lightweight verifiable outsourced decryption of attribute-based encryption scheme for blockchain-enabled wireless body area network in fog computing[J].International Journal of Distributed Sensor Networks，2020，16（2）：1-13.
[24] ZHAO J，ZENG P，CHOO K.An efficient access control scheme with outsourcing and attribute revocation for fog-enabled e-health[J].IEEE Access，2021，9：13789-13799.
[25] BEIMEL A.Secure schemes for secret sharing and key distribution[M].Haifa，Israel：Technion-Israel Institute of Technology，Faculty of Computer Science，1996.
[26] DAN B.The decision diffie-hellman problem[C]//Proceedings of the International Algorithmic Number Theory Symposium，1998：48-63.
[27] ANDROULAKI E，BARGER A，BORTNIKOV V，et al.Hyperledger fabric：A distributed operating system for permissioned blockchains[C]//Proceedings of the Thirteenth EuroSys Conference，2018：30.
[28] UNGER N.PBC go wrapper：Pairing based creyptography of golang wrapper[EB/OL].（2018-12-05）.https：//pkg.go.dev/github.com/Nik-U/pbc.com.