摘要
物联网环境下的数据共享存在效率低下、隐私泄露等问题,以及基于密文策略的属性基加密(ciphertext policy attribute-based encryption,CP-ABE)数据共享方案因采用单授权机构,需要承担繁重的计算工作而成为系统运行效率的瓶颈.为解决上述问题,提出一种策略完全隐藏的高效多授权机构CP-ABE物联网数据共享方案.该方案利用多授权机构CP-ABE实现数据的细粒度访问控制,利用联盟链不可篡改的特性保证密文哈希值和密钥集合密文的安全,采用MurmurHash3算法实现策略的完全隐藏,避免访问策略泄露用户隐私信息;并结合多秘密共享算法改进多授权机构CP-ABE,进而提升数据共享的效率.理论分析证明该方案能够保证访问策略和秘密共享过程的安全性.仿真实验结果表明,所提方案在策略隐藏和秘密分发过程中都具有较好的性能.
Data sharing in the IoT environment suffers from inefficiency and privacy leakage,and the CP-ABE(ciphertext policy attribute-based encryption)data sharing scheme becomes a bottleneck of system operation efficiency because it adopts a single authority,which needs to undertake heavy computational work.To solve the above problems,an efficient multi-authority CP-ABE IoT data sharing scheme with completely hidden policies is proposed in this paper.The scheme uses multi-authority CP-ABE to realize fine-grained access control of data,and uses the non-tampering property of the consortium blockchain to ensure the security of ciphertext Hash and key set ciphertext,and adopts MurmurHash3 algorithm to realize the complete hiding of policy to avoid accessing policy to leak users’private information;and the scheme combines with multi-secret sharing algorithm to improve multi-authority CP-ABE,thus enhancing efficiency of data sharing.The theoretical analysis proves that the scheme can guarantee the security of access policy and secret sharing process.The simulation experimental results show that the proposed scheme has better performance in both policy hiding and secret distribution processes.
作者
张学旺
姚亚宁
付佳丽
谢昊飞
Zhang Xuewang;Yao Yaning;Fu Jiali;Xie Haofei(School of Software Engineering,Chongqing University of Posts and Telecommunications,Chongqing 400065;School of Automation,Chongqing University of Posts and Telecommunications,Chongqing 400065)
出处
《计算机研究与发展》
EI
CSCD
北大核心
2023年第10期2193-2202,共10页
Journal of Computer Research and Development
基金
国家重点研发计划项目(2022YFB3204503)。
关键词
策略隐藏
多秘密共享
多授权机构
物联网
联盟链
policy hiding
multi-secret sharing
multi-authority
Internet of things
consortium blockchain
