云计算中可验证的外包密钥策略属性加密方法
54 浏览量
更新于2024-08-28
收藏 713KB PDF 举报
本文主要探讨了在云计算环境中实现可验证外包密钥策略属性加密（Verifiable Outsourced Ciphertext-Policy Attribute-Based Encryption, V-OC-ABE）的方法和应用。在现代的属性基础加密（Attribute-Based Encryption, ABE）系统中，用户可以根据自身的属性来加密和解密信息，这种灵活性使其在各种网络环境中得到了广泛应用。然而，ABE的复杂功能往往导致了巨大的计算开销，这在实际应用中成为一个限制因素。
为了缓解这一问题，研究人员提出了V-OC-ABE的概念。在这个系统中，关键生成中心、加密者和解密者可以将计算任务分别外包给相应的服务提供商，从而显著减少本地计算负担。这种设计旨在提高系统的效率，使得复杂的ABE操作可以在云端高效处理，而不必过分依赖用户的本地设备性能。
具体来说，V-OC-ABE的核心特征包括：
1. **计算任务外包**：通过将加密和解密算法的执行移交给云服务，用户无需承担加密策略匹配和解密过程中的计算密集型任务，减轻了本地计算压力。
2. **可验证性**：系统保持了加密的安全性的同时，还确保了服务提供商在执行任务时的行为是可验证的，即能够验证他们是否按照预设的策略进行操作，防止未经授权的数据访问或泄露。
3. **多方协作**：关键生成中心、加密者和解密者之间的协作无缝进行，每个角色都有各自的任务分工，提高了整体系统的效率。
4. **适用云计算环境**：V-OC-ABE的设计特别适用于云计算场景，因为云提供了大规模并行处理的能力，适合处理ABE的复杂运算。
论文《Verifiable Outsourced Ciphertext-Policy Attribute-Based Encryption in Cloud Computing》发表于2017年的《SoftComput》期刊，作者Hao Wang、Debiao He等人阐述了该技术的理论框架、实现原理以及可能的应用场景，如数据共享、权限管理等。他们强调了这一创新方法对优化云计算环境下ABE系统性能的重要性，并期待该技术能促进ABE在实际场景中的广泛应用。
这篇研究论文为解决云计算环境下的计算效率问题提供了一种新的解决方案，展示了如何利用云服务的优势来扩展和增强属性基础加密的功能，同时保证了数据的安全性和可信度。这对于推动云计算时代的安全数据管理和隐私保护具有重要意义。
Verifiable outsourced ciphertext-policy attribute-based encryption in cloud computing 7327
– (Orthogonal) If f
i
∈ G
p
i
and f
j
∈ G
p
j
for i = j, then
e( f
i
, f
j
) is the identity element in G
T
.
In this paper, we set n = 3, i.e., N = p
1
p
2
p
3
. For any non-
empty set Z ⊆{1, 2, 3}, there is a corresponding subgroup
of G of order
i∈Z
p
i
.LetG
Z
denote this subgroup.
2.2 Complexity assumption
Assumption 1 Lewko and Waters (2012)LetZ
0
, Z
1
, Z
2
,…,
Z
k
denote a collection of non-empty subsets of {1, 2, 3}
where each Z
i
for i ≥ 2 satisfies either Z
0
Z
i
= ∅ =
Z
1
Z
i
or Z
0
Z
i
= ∅ = Z
1
Z
i
. We define the follow-
ing distribution:
G := (N = p
1
p
2
p
3
, G, G
T
, e)
R
← G,
g
Z
2
R
← G
Z
2
,...,g
Z
k
R
← G
Z
k
,
D := (G, g
Z
2
,...,g
Z
k
),
T
0
R
← G
Z
0
, T
1
R
← G
Z
1
Fixing the collection of sets Z
0
,…, Z
k
, the advantage of an
algorithm A in breaking this assumption is defined to be:
Adv
1
G,A
(λ) := |Pr[A(D, T
0
) = 1]−Pr[A(D, T
1
) = 1]|.
If Adv
1
G,A
(λ) is a negligible function, we say that G satisfies
Assumption 1.
Assumption 2 Lewko and Waters (2010), Lewko et al.
(2010), Lewko and Waters (2012) We define the following
distribution:
G := (N = p
1
p
2
p
3
, G, G
T
, e)
R
← G,
g
1
R
← G
p
1
, g
2
, X
2
, Y
2
R
← G
p
2
, g
3
R
← G
p
3
,
α, s
R
← Z
N
D := (G, g
1
, g
2
, g
3
, g
α
1
X
2
, g
s
1
Y
2
),
T
0
= e(g
1
, g
1
)
αs
, T
1
R
← G
T
The advantage of an algorithm A in breaking this assumption
is defined to be:
Adv
2
G,A
(λ) := |Pr[A(D, T
0
) = 1]−Pr[A(D, T
1
) = 1]|.
If Adv
2
G,A
(λ) is a negligible function, we say that G satisfies
Assumption 2.
3 Definition of outsourced ABE
3.1 Algorithms
In an outsourced ABE system, there are seven types of
entities, namely key generation center (KGC), encryp-
tor, decryptor, outsourcing key generation server provider
(OKGSP), outsourcing encryption service provider (OESP),
outsourcing decryption service provider (ODSP), outsourc-
ing decryption service provider (ODSP), and outsourcing
verification service provider (OVSP). They interact as in
Fig. 1 and run the following seven algorithms:
– Setup(λ, U ) → PP, MSK The setup algorithm takes
security parameter λ and attribute universe U as input
and outputs public parameters PP and master secret key
MSK. PP may be widely distributed, while MSK is known
only to key generation center (KGC).
– Outsourcing-KeyGen-PreProc(PP, MSK) → MSK
O
,
MSK
L
The outsourcing key generation preprocessing
algorithm is run by key generation center (KGC); it takes
the public parameters PP and the master secret key MSK
as input. It outputs an outsourcing master secret key
MSK
O
and a local master secret key MSK
L
. Then, it
delegates the MSK
O
to its outsourcing key generation
server provider (OKGSP) and keeps MSK
L
locally.
– Outsourcing-KeyGen(PP, MSK
O
, I
key
) → IK
I
key
The
outsourcing key generation algorithm is run by outsourc-
ing key generation service provider (OKGSP); it takes
the PP, MSK
O
, and an attribute set (resp. access struc-
ture) I
key
as input. It outputs an intermediate key IK
I
key
and sends IK
I
key
to KGC.
– KeyGen(PP, MSK
L
, IK
I
key
) → SK
I
key
The key gener-
ation algorithm is run by key generation center (KGC);
it takes the public parameters PP, the local master secret
key MSK
L
, the intermediate key IK
I
key
as input, and out-
puts a user secret key SK
I
key
for attribute set (resp. access
structure) I
key
.
Encryptor
Decryptor
KGC
ODSPPSVOPSEO
OKGSP
Fig. 1 Outsourced ABE System
123
剩余10页未读，继续阅读
2021-02-22 上传
2018-12-17 上传
2021-02-08 上传
2021-02-09 上传
2021-05-13 上传
2021-02-08 上传
2021-04-06 上传
2021-02-08 上传
2021-02-06 上传
weixin_38746574
- 粉丝: 10
- 资源: 937
我的内容管理
展开
最新资源
- Java集合ArrayList实现字符串管理及效果展示
- 实现2D3D相机拾取射线的关键技术
- LiveLy-公寓管理门户：创新体验与技术实现
- 易语言打造的快捷禁止程序运行小工具
- Microgateway核心：实现配置和插件的主端口转发
- 掌握Java基本操作：增删查改入门代码详解
- Apache Tomcat 7.0.109 Windows版下载指南
- Qt实现文件系统浏览器界面设计与功能开发
- ReactJS新手实验：搭建与运行教程
- 探索生成艺术：几个月创意Processing实验
- Django框架下Cisco IOx平台实战开发案例源码解析
- 在Linux环境下配置Java版VTK开发环境
- 29街网上城市公司网站系统v1.0：企业建站全面解决方案
- WordPress CMB2插件的Suggest字段类型使用教程
- TCP协议实现的Java桌面聊天客户端应用
- ANR-WatchDog: 检测Android应用无响应并报告异常
