摘要
基于密文策略的属性加密方案(CP-ABE)为云存储系统提供了安全、细粒度的访问控制,但由于加/解密算法中的双线性配对运算量较大,给用户端带来了沉重的负担。为了解决上述问题,提出了一种雾计算中支持解密外包的可验证属性加密方案。方案中以线性秘密共享方案构造访问矩阵,可以灵活表达多种形式的访问策略;将部分解密运算外包给雾节点,从而降低用户端运算负担;为增强外包雾节点的可信度,通过区块链交易对雾节点存取的密文进行正确性验证,并实现访问行为的不可否认性。通过安全性与实验分析表明,该方案可抵抗选择明文攻击,且具有较高的运行效率。
The ciphertext policy-based attribute encryption scheme(CP-ABE)provides secure and fine-grained access control for cloud storage systems.However,due to the large amount of bilinear pairing operation in the encryption and decryption algorithm,it brings a heavy burden to the users.In order to solve the above problems,a verifiable attribute-based encryption scheme supporting outsourced decryption in fog computing is proposed.In the scheme,the linear secret sharing scheme is used to construct the access matrix,which can express various forms of access policies flexibly.Part of the decryption operations is outsourced to fog nodes,so as to reduce the computing burden of the client.To enhance the credibility of outsourced fog nodes,the correctness of the ciphertext accessed by fog nodes is verified through blockchain transactions,and the access behaviors cannot be denied.Through security and experimental analysis,it is proved that the scheme can resist selective plaintext attack and has high operation efficiency.
作者
段亚红
王峥
赵涓涓
王龙
DUAN Ya-hong;WANG Zheng;ZHAO Juan-juan;WANG Long(College of Information and Computer,Taiyuan University of Technology,Jinzhong 030600;Jinzhong College of Information,Jinzhong 030600,China)
出处
《计算机工程与科学》
CSCD
北大核心
2023年第3期443-452,共10页
Computer Engineering & Science
基金
山西省基础研究计划(202103021224066)。
关键词
属性加密
雾计算
外包解密
区块链
attribute-based encryption
fog computing
outsourced decryption
blockchain
