短密文可验证的匿名多接收者ID加密方案
173 浏览量
更新于2024-08-26
收藏 179KB PDF 举报
本文主要探讨了一种在信息技术领域具有重要意义的研究论文，标题为"具有较短密文的可验证安全匿名多接收者身份加密"。该研究聚焦于身份基（Identity-Based Encryption, IBE）的一种特殊形式——匿名多接收者身份加密（Anonymous Multi-Receiver Identity-Based Encryption, ID-MRE），它不仅确保了消息的机密性，还能保护接收者的身份，使其在诸如VoIP（Voice over Internet Protocol，网络电话）和付费电视系统等应用中具备高度实用价值。
基于双线性配对（Bilinear Pairings）这一先进的数学工具，作者Huaqun Wang提出了一个全新的ID-MRE方案。这个方案在设计上注重安全性，满足了选择性多重身份下的不可区分性（IND-sMID-CCA2）和选择性多重身份下的匿名不可区分性（ANON-sMID-CCA2）。这意味着即使攻击者可以针对多个可能的身份进行攻击，他们也无法区分真假密文，从而提高了系统的安全性。
具体来说，"基本的公钥加密方案必须满足两个核心要求"这一介绍部分可能指代的是加密系统的基本安全属性，如保密性和认证性。作者在文中可能详细解释了这两个要求在ID-MRE中的实现方式，例如数据的加密和解密过程，以及如何通过双线性配对的性质确保这些属性在匿名接收者模式下得到维护。
安全分析部分展示了作者对提出的方案进行了严谨的理论证明，证明了其在面对各种攻击情况下的安全性是无懈可击的。性能分析则关注了该方案在实际应用中的效率，包括加密、解密时间以及密文大小等关键参数，确保了在提供安全保障的同时，不会牺牲系统的运行速度和资源占用。
关键词部分提到了"匿名性"、"多接收者"、"身份加密"以及"证明性安全"，这些都是本文的核心概念，突出了研究的焦点和创新点。这篇论文在ID-MRE的领域做出了贡献，提供了具有更短密文长度且具备高度安全性的加密解决方案，对于推动身份加密技术在隐私保护和通信安全方面的发展具有重要的学术价值。
Provably Secure Anonymous M ulti-Receiver Identity-Based Encryption with
Shorter Ciphertext
Huaqun Wang
School of Information Engineering, Dalian Ocean University, Dalian, China
wanghuaqun@aliyun.com
Abstract—Anonymous multi-receiver identity-based encryp-
tion (ID-MRE) can protect the r eceiver identity besides message
confidentiality. It can be applied in many fields, such as VoIP
(Voice over Internet Protocol) and pay-TV systems. Based
on the bilinear pairings, this paper proposes an anonymous
ID-MRE scheme. The proposed scheme satisfies the indis-
tinguishability of encryptions under selective multi-identity,
adaptive chosen ciphertext attacks (IND-sMID- CCA2). On the
other hand, it also satisfies the anonymous indistinguishability
of encryptions under selective multi-identity, adaptive chosen
ciphertext attacks (ANON-sMID-CCA2). The security analysis
and performance analysis show that our scheme is provably
secure and efficient.
Keyw ords-anonymity; multi-receiver; identity-based encryp-
tion; provable security;
I. INTRODUCTION
Public key encryption scheme must satisfy two basic
security requirements: security and efficiency. The standard
security notion for a encryption scheme is indistinguisha-
bility against adaptive chosen ciphertext attacks, i.e., IND-
CCA2 for short. With respect to efficiency, there are two
main aspects to consider: computational efficiency and com-
munication efficiency. As a special public key encryption
system, multi-receiver encryption can broadcasts a message
with a high-level of computational efficiency while retaining
security. This encryption system can be used in the real
world where there are many users, each with a public
key. The service provider sends them the encrypted data.
Although multi-receiver encryption can solve some problems
in the real world, it cannot protect the privacy of receivers.
On the other hand, it is very important to protect receiver
privacy in some fields, such as VoIP, pay-TV, et al. Thus,
anonymous ID-MRE attracted attentions of some experts
from different fields. It is meaningful to design the anony-
mous ID-MRE security model and the concrete anonymous
ID-MRE scheme.
A. Motivation
In the pay-TV or streaming audio/video services, the
service provider will encrypt the audio/video and sends the
ciphertext to all the receivers who have ordered the program.
Upon receiving the ciphertext, the receiver decrypts the
ciphertext by using his/her personal private key. When the
client orders the sensitive program, he/she usually expects
to hide his/her identity even to other receivers. Thus, it is
important and necessary to study anonymous multi-receiver
encryption scheme.
B. Related works
The concept of multi-receiver public key encryption was
independently formalized by Bellare et al. [1] and Baudron,
et al. [2]. It can be used in many fields, for example,
underwater sensor networks [3], large-scale RFID system-
s[4],etc. After that, many multi-receiver identity-based
encryption schemes are designed [5], [6]. These schemes
do not protect receivers privacy. Until 2012, Fan et al.
presented an anonymous multi-receiver identity-based en-
cryption scheme by taking use of Lagrange interpolating
polynomial mechanisms [7]. It’s regretful that their scheme
does not satisfy the property of anonymity [8], [9]. After
that, Hur et al. proposed a novel privacy-preserving identity-
based broadcast encryption scheme by taking use of key
encapsulation mechanism [10]. In some situations, such as
ordering sensitive TV programmes, a receiver or customer
usually expects that any other receiver or customer does
not know her/his ID when ordering the TV programmes.
Anonymous multi-receiver IBE has a lot of applications. It
is necessary to study this type of cryptographic system.
In an identity-based public key cryptography system,
every user has his/her own identity (ID). These ID may
be some meaningful or easily memorized strings. ID-based
cryptography has attracted a lot of researchers and has
gained some results [11], [12], [13], [14]. Since elliptic curve
public key cryptography is more secure than RSA based on
the same security level, this cryptography system develops
faster. After bilinear pairings were proposed, they are used
to design public key cryptographic schemes [15], [16], [17],
[18]. Bilinear pairings can also be used to study anonymous
ID-MRE cryptographic system.
C. Our contributions
In this paper, we propose a provably secure anonymous
multi-receiver identity-based encryption scheme. The secu-
rity analysis and performance analysis show that our scheme
is provably secure and highly efficient.
2014 IEEE 12th International Conference on Dependable, Autonomic and Secure Computing
978-1-4799-5079-9/14 $31.00 © 2014 IEEE
DOI 10.1109/DASC.2014.24
85
下载后可阅读完整内容，剩余5页未读，立即下载
2021-01-14 上传
2021-03-20 上传
2021-02-23 上传
2021-05-08 上传
点击了解资源详情
点击了解资源详情
点击了解资源详情
点击了解资源详情
点击了解资源详情
weixin_38693476
- 粉丝: 1
- 资源: 949
我的内容管理
展开
