Abstract:

In fog computing, Ciphertext-Policy Attribute-Based Encryption（CP-ABE） technology is widely used to solve the problem of fine-grained access control of data. However, the encryption and decryption calculations bring a heavy burden on IoT devices with limited resources. This paper proposes an improved CP-ABE scheme based on multi-authority model, outsourcing part of the encryption and decryption computing from the IoT device to the nearby fog nodes, reducing the computing of the IoT device while achieving fine-grained access control of data. This scheme is suitable for actual IoT application scenarios. The efficiency and function of the proposed scheme are analyzed from both theoretical and experimental aspects. The analysis results show that the proposed scheme has higher system efficiency and practical value.

Key words: fog computing, Ciphertext-Policy Attribute-Based Encryption（CP-ABE）, computing outsourcing, multi-authority

摘要：

在雾计算中，基于密文策略属性加密（Ciphertext-Policy Attribute-Based Encryption，CP-ABE）技术被广泛用于解决数据的细粒度访问控制问题，然而其中的加解密计算给资源有限的物联网设备带来沉重的负担。提出一种改进的支持计算外包的多授权CP-ABE访问控制方案，将部分加解密计算从物联网设备外包给临近的雾节点，在实现数据细粒度访问控制的同时减少物联网设备的计算开销，适用于实际的物联网应用场景。从理论和实验两方面对所提方案的效率与功能进行分析，分析结果表明所提方案具有较高的系统效率和实用价值。

关键词: 雾计算, 基于密文策略属性加密（CP-ABE）, 计算外包, 多授权机构