支持访问策略隐藏的属性基加密方案研究
Research of CP-ABE Supported Hidden Access Policy
DOI: 10.12677/CSA.2019.92032, PDF,   
作者: 张兴兰*, 王明明：北京工业大学，北京
关键词: 属性基加密；隐藏策略；DBDH假设；CP-ABE； Hidden Policy； DBDH Assumption
摘要: 支持策略隐藏的属性基加密不仅可以保护明文，还可以保护用户的敏感信息。现有方案对访问结构有所限制，策略表达能力比较弱。本文提出一种隐藏访问策略的属性基加密方案，通过将访问结构转换成属性列表，然后对属性列表加密处理实现了策略隐藏，并且该方案对访问结构没有任何的限制。此外，将部分解密计算外包，减轻了用户的计算负担。分析表明，新方案在实现策略隐藏的同时增强了策略表达的灵活性，提高了解密效率，并且在DBDH假设下证明是选择明文攻击安全的。
Abstract: Attribute-based encryption that supports policy hiding not only protects plaintext, but also protects user’s sensitive information. The existing schemes have limitations on the access structure and weak strategy expression. This paper proposes an attribute-based encryption scheme for hidden access policies. It implements policy hiding by transforming the access structure into a property list and then encrypting the property list. The scheme has no restrictions on the access structure. In addition, outsourcing partial decryption calculations reduce the computational burden on users. Analysis shows that the new scheme enhances the flexibility of policy expression and decryption efficiency while implementing policy hiding, and proves to be secure under the DBDH assumption.
文章引用：张兴兰, 王明明. 支持访问策略隐藏的属性基加密方案研究[J]. 计算机科学与应用, 2019, 9(2): 275-281. https://doi.org/10.12677/CSA.2019.92032

参考文献

[1] 曹珍富, 董晓蕾, 周俊, 等. 大数据安全与隐私保护研究进展[J]. 计算机研究与发展, 2016, 53(10): 2137-2151.
[2] Shamir, A. (1985) Identity-Based Cryptosystems and Signature Schemes. In: Advances in Cryptology, Springer, Berlin Heidelberg, 47-53. [Google Scholar] [CrossRef] 
[3] Sahai, A. and Waters, B. (2005) Fuzzy Identity-Based Encryption. Advances in Cryptology—EUROCRYPT 2005. Springer, Berlin Heidelberg, 457-473. [Google Scholar] [CrossRef] 
[4] Chander, V.P., Babu, G.C., Babu, S.S., et al. (2013) Procure Data Storage in Clode Using CPABE. International Journal of Computer Trends & Technology, 4, 77-84.
[5] Goyal, V., Pandey, O., Sahai, A., et al. (2006) Attribute-Based Encryption for Fine-Grained Access Control of Encrypted Data. Proceedings of ACMCCS’06, ACM Press, New York, 89-98.
[6] 冯登国, 陈成. 属性密码学研究[J]. 密码学报, 2014, 1(1): 1-12.
[7] 苏金树, 曹丹, 王小峰. 属性基加密机制[J]. 软件学报, 2011, 22(6): 1299-1315.
[8] Nishide, T., Yoneyama, K. and Ohta, K. (2008) Attribute-Based Encryption with Partially Hidden Encryptor-Specified Access Structures. ACNS 2008: Applied Cryptography and Network Security, New York, 3-6 June 2008, 111-129. [Google Scholar] [CrossRef] 
[9] Lai, J., Deng, R.H. and Li, Y. (2011) Fully Secure Cipertext-Policy Hiding CP-ABE. ISPEC 2011: Information Security Practice and Experience, Guangzhou, May 30-June 1 2011, 24-39. [Google Scholar] [CrossRef] 
[10] Hur, J. (2013) Attribute-Based Secure Data Sharing with Hidden Policies in Smart Grid. IEEE Transactions on Parallel and Distributed Systems, 24, 2171-2180. [Google Scholar] [CrossRef] 
[11] 杜瑞颖, 沈剑, 陈晶, 周顺淦. 基于策略隐藏属性加密的云访问控制方案[J]. 武汉大学学报(理学版), 2016, 62(3): 242-248.
[12] 宋衍, 韩臻, 刘凤梅, 等. 基于访问树的策略隐藏属性加密方案[J]. 通信学报, 2015, 36(9): 119-126.
[13] Green, M., Hohenberger, S. and Waters, B. (2011) Outsourcing the Decryption of ABE Ciphertexts. Proceedings of the 20th USENIX Conference on Security, San Francisco, 8-12 August 2011, 34-34.
[14] Lai, J., Deng, R.H., Guan, C., et al. (2015) Attribute-Based Encryption with Verifiable Outsourced Decryption. IEEE Transactions on Information Forensics & Security, 10, 1384-1393. [Google Scholar] [CrossRef] 
[15] Liu, H., Wang, X. and Zhang, P. (2015) Verifying Outsourced Decryption of CP-ABE with Signature. 2015 4th International Conference on Mechatronics, Materials, Chemistry and Computer En-gineering.
[16] 马华, 白翠翠, 李宾, 刘振华. 支持属性撤销和解密外包的属性基加密方案[J]. 西安电子科技大学学报, 2015, 42(6): 6-10+55.
[17] 丁晓红, 秦敬源, 王新. 一种属性基加密方案的外包解密方法[J]. 计算机科学, 2016, 43(S1): 357-360.
[18] Emura, K., Miyaji, A., Nomura, A., et al. (2009) A Ciphertext-Policy Attribute-Based Encryption Scheme with Con-stant Ciphertext Length. Proceedings of ISPEC 2009, Springer, Berlin, 12-23. [Google Scholar] [CrossRef]