计算机工程与应用 ›› 2015, Vol. 51 ›› Issue (3): 79-84.

• 网络、通信、安全 • 上一篇    下一篇

多授权机构下可撤销叛徒的属性基加密方案

钟云捷1,2,曾国荪1,2,马海英1,3   

  1. 1.同济大学 计算机科学与技术系,上海 201804
    2.嵌入式系统与服务计算教育部重点实验室,上海 201804
    3.南通大学 计算机科学与技术学院,江苏 南通 226019
  • 出版日期:2015-02-01 发布日期:2015-01-28

Multi-authority attribute-based encryption scheme for traitor

ZHONG Yunjie1,2, ZENG Guosun1,2, MA Haiying1,3   

  1. 1.Department of Computer Science and Technology, Tongji University, Shanghai 201804, China
    2.Embedded System and Service Computing Key Lab of Ministry of Education, Shanghai 201804, China
    3.College of Computer Science and Technology, Nantong University, Nantong, Jiangsu 226019, China
  • Online:2015-02-01 Published:2015-01-28

摘要: 针对单授权机构下属性基加密方案中的密钥滥用问题,以及加密机制本身存在的效率和安全问题,研究一种在多授权机构下可对非法用户(或叛徒)进行撤销的属性基加密方案。在单授权机构下属性基加密方案的基础上,利用双线性映射和线性秘密共享方案等来实现多个授权机构相互协作而不需要中央机构控制,并结合完全子树架构将用户映射到二叉树上来提高撤销叛徒的效率,将单授权方案转化成多授权机构下的可撤销叛徒的属性基加密方案MA-TRABE,还分析了该方案的抗串谋攻击安全性和多授权机构下的安全性。根据电子商务安全支付的需要,设计了MA-TRABE的实际应用。

关键词: 属性基加密, 多授权机构, 叛徒撤销, 完全子树架构

Abstract: Due to the key-abuse problem in the single authority attribute-based encryption, as well as the efficiency and security issues because of the encryption mechanism, this paper studies a multi-authority attribute-based encryption which can implement the revocation of unauthorized users(or traitors). Using bilinear mapping and linear secret sharing scheme to implement the interaction of multiple authorities without the need for a central authority, as well as combing with the complete subtree structure to map the users to a binary tree for efficiency improvement of traitor revocation, the paper transfers a single authority scheme into a multi-authority attribute-based encryption scheme for traitor revocation called MA-TRABE. It also analyzes the security under collusion attack and multi-authority circumstances. According to the needs of security payment in the e-commerce, the practical application of MA-TRABE is designed.

Key words: attribute-based encryption, multi-authority, traitor verocation, complete subtree structure