利用LWE问题构造的多机构属性基加密方案

doi:10.3969/j.issn.1001-2400.2018.04.023

摘要/Abstract

摘要：

由于大多属性基加密方案以双线性映射为基础，因此存储和计算代价较大，且无法抵抗量子攻击．针对上述问题，基于格上的带误差学习问题提出一种多机构属性基加密方案．该方案由多个属性机构管理不同的属性集，并分别为其权限内的用户分发密钥，保证安全性的同时提高系统整体效率；同时，运用Shamir门限秘密共享技术，采用访问树结构实现访问策略的与、或、门限3种操作，灵活性高．此外，该方案利用格理论替代双线性对，引入无维数增长的格基派生算法，提高了加解密速度，降低了用户私钥和密文的存储代价．经安全性分析证明，方案在标准模型下满足选择明文攻击安全．通过与其他方案的对比，表明该方案访问策略灵活，功能完善，系统性能优化，可以更好地应用于大规模分布式环境．

关键词: 属性基加密, 多机构, 格, 标准模型, 带误差学习, 访问树

Abstract:

Most ABE schemes are based on bilinear maps, which leads to a high cost of storage and communication, and which cannot resist quantum attacks. Thus, we propose an LWE-based multi-authority attribute-based encryption scheme. In this scheme, there are different attribute authorities which can manage different attribute sets and generate privacy keys for the users. It can ensure the safety and improve the efficiency of the system. In addition, the Shamir secret-sharing schemes technology is introduced to construct the access tree structure which can support “and”, “or” and “threshold” operations of attributes with a high flexibility. Besides, we use the lattice theory and the basis delegation without a dimension increase algorithm in our scheme, which can not only increase the speed of encryption and decryption, but can also reduce the storage cost of the user′s private key and ciphertext. Lastly, the scheme is proved to be secure against the chosen plaintext attack under the standard model. Compared with the existing related schemes, our scheme can improve prominently the flexibility of the access policy, and it also can achieve a better system performance. Therefore, our scheme is more effective in the large scale distributed environment.

Key words: attribute based encryption, multi-authority, lattices, standard model, learning with errors, access tree

闫玺玺;刘媛;李子臣;汤永利;叶青. 利用LWE问题构造的多机构属性基加密方案[J]. 西安电子科技大学学报, 2018, 45(4): 129-136.

YAN Xixi;LIU Yuan;LI Zichen;TANG Yongli;YE Qing. Multi-authority attribute-based encryption scheme from LWE problem[J]. Journal of Xidian University, 2018, 45(4): 129-136.

参考文献

［1］ SAHAI A, WATERS B. Fuzzy Identity-based Encryption［C］//Lecture Notes in Computer Science: 3494. Heidelberg: Springer Verlag, 2005: 457-473.
［2］ CHASE M. Multi-authority Attribute Based Encryption［C］//Lecture Notes in Computer Science: 4392. Heidelberg: Springer Verlag, 2007: 515-534.
［3］ CHASE M, CHOW S S M. Improving Privacy and Security in Multi-authority Attribute-based Encryption［C］//Proceedings of the 2009 ACM Confenence of Computer and Communication Security. New York: ACM, 2009: 121-130.
［4］ HAN J G, SUSILO W, MU Y, et al. Improving Privacy and Security in Decentralized Ciphertext-policy Attribute-based Encryption［J］. IEEE Transactions on Information Forensics and Security, 2015, 10 (3): 665-678.
［5］ YING Z B, LI H, MA J F, et al. Adaptively Secure Ciphertext-policy Attribute-based Encryption with Dynamic Policy Updating［J］. Science China-Information Sciences, 2016, 59(4): 042701.
［6］应作斌, 马建峰, 崔江涛. 支持位置验证和策略变更的属性加密方案［J］. 西安电子科技大学学报, 2017, 44(2): 57-62.
YING Zuobin, MA Jianfeng, CUI Jiangtao. Attribute-based Encryption with Location Verification and Policy Adjusting Supporting the Cloud Mobile Office［J］. Journal of Xidian University, 2017, 44(2): 57-62.
［7］ REGEV O. On Lattices, Learning with Errors, Random Linear Codes, and Cryptography［C］//Proceedings of the 2005 Annual ACM Symposium on Theory of Computing. New York: ACM, 2005: 84-93.
［8］汤永利, 胡明星, 刘琨, 等. 新的格上基于身份的全同态加密方案［J］. 通信学报, 2017, 38(5): 39-47.
TANG Yongli, Hu Mingxing, LIU Kun, et al. Novel Identity-based Fully Homomorphic Encryption Scheme from Lattice［J］. Journal on Communications, 2017, 38(5): 39-47.
［9］ AGRAWAL S, BOYEN X, VAIKUNTANATHAN V, et al. Functional Encryption for Threshold Functions (or Fuzzy IBE) from Lattices［C］//Lecture Notes in Computer Science: 7293. Heidelberg: Springer Verlag, 2012: 280-297.
［10］ BOYEN X. Attribute-based Functional Encryption on Lattices［C］//Lecture Notes in Computer Science: 7785. Heidelberg: Springer Verlag, 2013: 122-142.
［11］ LIU X, MA J, XIONG J, et al. Threshold Attribute-based Encryption with Attribute Hierarchy for Lattices in the STandard Model［J］. IET Information Security, 2014, 8(4): 217-223.
［12］ ZHAO J, GAO H, ZHANG J. Attribute-Based Encryption for Circuits on Lattices［J］. Tsinghua Science and Technology, 2014, 19(5): 463-469.
［13］ WANG Y. Lattice Ciphertext Policy Attribute-based Encryption in the Standard Model［J］. International Journal of Network Security, 2014, 16(6): 444-451.
［14］吴立强, 杨晓元, 韩益亮. 基于理想格的高效模糊身份加密方案［J］. 计算机学报, 2015, 38(4): 775-782.
WU Liqiang, YANG Xiaoyuan, HAN Yiliang. An Efficient FIBE Scheme Based on Ideal Lattices［J］. Chinese Journal of Computers, 2015, 38(4): 775-782.
［15］ ZHANG G Y, QIN J, QAZI S. Multi-authority Attribute-based Encryption Scheme from Lattices［J］. Journal of Universal Computer Science, 2015, 21(3): 483-501.
［16］闫玺玺, 刘媛, 胡明星, 等. 云环境下基于LWE的多机构属性基加密方案［J］. 信息网络安全, 2017(9):128-133.
YAN Xixi, LIU Yuan, HU Mingxing, et al. LWE-based Multi-authority Attribute-based Encryption Scheme in Cloud Environment ［J］. Netinfo Security, 2017(9): 128-133.
［17］ GENTRY C, PEIKERT C, VAIKUNTANATHAN V. Trapdoors for Hard Lattice and New Cryptographic Constructions［C］//Proceedings of the 2008 Annual ACM Symposium on Theory of Computing. New York: ACM, 2008: 197-206.
［18］ AGRAWAL S, BONEH D, BOYEN X. Lattice Basis Delegation in Fixed Dimension and Shorter-ciphertext Hierarchical IBE［C］//Lecture Notes in Computer Science: 6223. Heidelberg: Springer Verlag, 2010: 98-115.

[1]	蒋林,冯茹,邓军勇,李远成. BC算法性能与图数据格式的关系特性分析[J]. 西安电子科技大学学报, 2021, 48(6): 57-66.
[2]	杨颜博,张嘉伟,马建峰. 一种使用区块链保护车联网数据隐私的方法[J]. 西安电子科技大学学报, 2021, 48(3): 21-30.
[3]	刘欣,李金泽,孙浩. 采用多模光纤级联布拉格光栅的温湿度传感器[J]. 西安电子科技大学学报, 2020, 47(3): 92-96.
[4]	于金霞,何旭,闫玺玺. 机构可验证的密文策略属性基加密方案[J]. 西安电子科技大学学报, 2019, 46(4): 49-57.
[5]	王剑书,樊养余,杜瑞,吕国云. 一种用于矩形阵列的二维波达方向估计方法[J]. 西安电子科技大学学报, 2019, 46(4): 122-129.
[6]	郭松鸽;吕东辉;任艳丽. 一种改进的(k, n)标记视觉密码方案[J]. 西安电子科技大学学报, 2018, 45(5): 170-176+183.
[7]	闫玺玺;刘媛;李子臣;汤永利. 策略半隐藏且支持更新的多机构属性加密方案[J]. 西安电子科技大学学报, 2018, 45(2): 122-128+147.
[8]	张永强;刘佳南;田海博. 满足便携文档格式的公平多方合同签署协议[J]. 西安电子科技大学学报, 2018, 45(1): 117-122.
[9]	冯立康;侯蓉晖. 联合eICIC和CoMP的小蜂窝网络干扰管理机制[J]. 西安电子科技大学学报, 2017, 44(5): 32-38.
[10]	娄利飞;王东洋;潘青彪;张军琴. 十字形石墨烯纳米结的电子输运特性[J]. 西安电子科技大学学报, 2017, 44(5): 87-91+120.
[11]	孙越;冯象初;李小平;张瑞. 接触问题的增广拉格朗日块体粘接模型[J]. 西安电子科技大学学报, 2017, 44(4): 34-39.
[12]	任衍青;逯志宇;巴斌;王大鸣. 锐化遗传直接定位快速估计算法[J]. 西安电子科技大学学报, 2017, 44(4): 144-150.
[13]	方小星;朱志宇;张明新;李阳. 雷达波对孔缝腔体内复杂传输线耦合影响[J]. 西安电子科技大学学报, 2016, 43(6): 135-140.
[14]	杨鑫;魏兵. 一种射线跟踪建模的新方法[J]. 西安电子科技大学学报, 2016, 43(3): 73-77.
[15]	刘巧红;李斌;林敏. 非凸混合总变分图像盲复原[J]. 西安电子科技大学学报, 2016, 43(2): 120-125.