本文選題：流程加密 + 密鑰策略��； 參考：《軟件學(xué)報(bào)》2017年10期

【摘要】：在許多實(shí)際的應(yīng)用場景中,當(dāng)用戶需要獲取敏感數(shù)據(jù)時(shí),需要判斷該用戶是否滿足某些"流程"的要求.現(xiàn)存的加密方案不能有效應(yīng)用到以上場景中.為了解決這一新問題,提出了一種新的加密原語:基于流程的加密(process based encryption,簡稱PBE),并把PBE分成兩種類型:密鑰策略的PBE(KP-PBE)與密文策略的PBE(CP-PBE).運(yùn)用雙線性映射與線性秘密共享協(xié)議的工具,給出了一種KP-PBE的構(gòu)造方法.隨后,把KP-PBE方案與傳統(tǒng)屬性加密進(jìn)行對比,指出在描述流程數(shù)量方面,KP-PBE與傳統(tǒng)屬性加密方案存在數(shù)量級的差異,從而體現(xiàn)了KP-PBE方案在描述流程方面的優(yōu)越性.最后,在選擇性安全的模型下,證明了該方案的安全性.
[Abstract]:In many practical application scenarios, when the user needs to obtain sensitive data, it is necessary to determine whether the user meets the requirements of some "flow". The existing encryption schemes cannot be effectively applied to the above scenarios. In order to solve this new problem, a new cryptographic primitive, (process based encryption, based on process encryption, is proposed, which is divided into two types: the key policy PBE (KP-PBE) and the ciphertext policy PBE (CP-PBE). By using bilinear mapping and linear secret sharing protocol, a construction method of KP-PBE is presented. Then, by comparing the KP-PBE scheme with the traditional attribute encryption scheme, it is pointed out that there is an order of magnitude difference between the KP-PBE scheme and the traditional attribute encryption scheme in terms of the quantity of the description process, which reflects the superiority of the KP-PBE scheme in describing the process. Finally, under the model of selective security, the security of the scheme is proved.
【作者單位】： 廣東財(cái)經(jīng)大學(xué)數(shù)學(xué)與統(tǒng)計(jì)學(xué)院;廣州大學(xué)數(shù)學(xué)與信息科學(xué)學(xué)院;華南農(nóng)業(yè)大學(xué)數(shù)學(xué)與信息學(xué)院;
【基金】：教育部人文社科研究項(xiàng)目(15YJCZH029) 廣州市哲學(xué)社會(huì)科學(xué)發(fā)展“十三五”規(guī)劃課題(2016GZYB25,2017GZQN 05) 國家自然科學(xué)基金(61772147,61300204) 廣東省自然科學(xué)基金重大基礎(chǔ)研究培育項(xiàng)目(2015A030308016);廣東省自然科學(xué)基金(2015A030313630) 廣東省教育廳基礎(chǔ)研究重大項(xiàng)目(2014KZDXM044) 廣東省普通高校創(chuàng)新團(tuán)隊(duì)建設(shè)項(xiàng)目(2015KCXTD014) 國家密碼發(fā)展基金(MMJJ20170117) 廣州市教育局協(xié)同創(chuàng)新重大項(xiàng)目(1201610005) 上海市信息安全綜合管理技術(shù)研究重點(diǎn)實(shí)驗(yàn)室開放課題基金(AGK2015007) 廣東省科技計(jì)劃(2016A020210103,2017A020208054)~~
【分類號】：TN918.4
，

本文編號：2057959