基于访问树的策略隐藏属性加密方案attribute-based encryption with .pdfVIP

第36 卷第9 期 通 信 学 报 Vol.36 No.9 2015 年9 月 Journal on Communications September 2015 doi:10.11959/j.issn.1000-436x.2015135 基于访问树的策略隐藏属性加密方案 1,2 1 2 2 宋衍 ，韩臻 ，刘凤梅 ，刘磊 (1. 北京交通大学 计算机与信息技术学院，北京100044；2. 信息保障技术重点实验室，北京100072) 摘 要：已有的策略隐藏属性加密（ABE ，attribute-based encryption ）方案只支持受限的访问结构，策略表达能 力弱，基于此提出一种新的访问树结构，使属性隐藏和秘密共享能够应用到“与”门、“或”门和“门限”门中。 并且，利用合数阶双线性群构造了一种基于访问树的策略隐藏方案，并通过双系统加密的概念证明了方案的安全 性。分析和实验验证表明，方案在实现复杂访问结构的策略隐藏的同时，并没有过多地增加计算开销，在实际应 用过程中更加灵活和有效。 关键词：属性加密；密文策略；策略隐藏；访问结构；合数阶双线性群 中图分类号：TP309.7 文献标识码：A Attribute-based encryption with hidden policies in the access tree 1,2 1 2 2 SONG Yan , HAN Zhen , LIU Feng-mei , LIU Lei (1. School of Computer and Information Technology, Beijing Jiaotong University, Beijing 100044, China; 2. Science and Technology on Information Assurance Laboratory, Beijing 100072, China) Abstract: The existing policies-hidden attribute-based encryption (ABE) schemes could only support a limited access structure, which resulted in weak expressiveness. A new structure of access tree was thus proposed to integrate attribute hiding and secret sharing into “and ” gate, “or ” gate and “threshold ” gate. Then, a tree-based policies-hidden scheme was constructed by using composite order bilinear groups. Under dual system encryption, the scheme was proved to be secure. Furthermore, the analysis and experiment demonstr