云存储中基于属性加密的通用型用户撤销系统

陈根浪; 许志倩; 姜海; 李冠憬

doi:10.1631/FITEE.1800405

Your Location：

Home >

Browse articles >

云存储中基于属性加密的通用型用户撤销系统

常规文章 | Updated：2022-05-19

- 云存储中基于属性加密的通用型用户撤销系统
- Generic user revocation systems for attribute-based encryption in cloud storag
- 信息与电子工程前沿（英文） 2018年19卷第11期页码：1362-1384
- Affiliations：
  
  Institute of Ningbo Technology, Zhejiang University, Ningbo 315000, China
  Independent Scholar
  Department of Computer Science, Arkansas State University, Jonesboro 72467, USA
  Department of Computer Science and Information Engineering, Providence University, Taiwan 43301, China
- Author bio：
  
  Genlang CHEN, E-mail: cgl@zju.edu.cn
  [ "Zhiqian XU, E-mail: zhiqian.xu@gmail.com" ]
  [ "Hai JIANG, E-mail: hjiang@astate.edu" ]
  [ "Hai JIANG, E-mail: kuancli@pu.edu.tw" ]
- Funds：
  
  Project supported by the Natural Science Foundation of Zhejiang Province, China (No. Y15F020113) and the Ningbo eHealth Project, China (No. 2016C11024)
- DOI：10.1631/FITEE.1800405
  中图分类号： TP309.2
- 收稿：2018-06-27，
  
  修回：2018-11-27，
  
  纸质出版：2018-11
- Accepted：
Scan QR Code
陈根浪, 许志倩, 姜海, 等. 云存储中基于属性加密的通用型用户撤销系统[J]. 信息与电子工程前沿（英文）, 2018,19(11):1362-1384.

Genlang CHEN, Zhiqian XU, Hai JIANG, et al. Generic user revocation systems for attribute-based encryption in cloud storag[J]. Frontiers of Information Technology & Electronic Engineering, 2018, 19(11): 1362-1384.
陈根浪, 许志倩, 姜海, 等. 云存储中基于属性加密的通用型用户撤销系统[J]. 信息与电子工程前沿（英文）, 2018,19(11):1362-1384. DOI： 10.1631/FITEE.1800405.

Genlang CHEN, Zhiqian XU, Hai JIANG, et al. Generic user revocation systems for attribute-based encryption in cloud storag[J]. Frontiers of Information Technology & Electronic Engineering, 2018, 19(11): 1362-1384. DOI： 10.1631/FITEE.1800405.

摘要

云存储是面向企业和个人用户的服务模型，包括付费和免费两种方式。基于云存储服务模型，用户通过互联网随时随地享受云存储提供的存储服务和管理功能。由于大多数云存储由第三方服务商提供，因此在数据保护和访问控制方面，云存储提供商和共享多租户环境下可信任性面临极大挑战。基于属性加密（attribute-based encryption，ABE）不仅保护数据的机密性，而且其中的密文或解密密钥与相关细粒度访问策略有关，这些策略在解密过程中被自动执行，使每个数据级别的数据访问处于控制之下。但是，在实际动态用户撤销应用中该方案有一定局限性。提出两种具有隐私保护功能的基于属性加密的通用型用户撤销系统：通过密文重加密（user revocation via ciphertext re-encryption，UR-CRE）实现的用户撤销系统和通过云存储提供商（user revocation via cloud storage providers，UR-CSP）实现的用户撤销系统。这两种系统可以与任意类型基于属性加密的方案协作，实现动态撤销用户。

Abstract

Cloud-based storage is a service model for businesses and individual users that involves paid or free storage resources. This service model enables on-demand storage capacity and management to users anywhere via the Internet. Because most cloud storage is provided by third-party service providers

the trust required for the cloud storage providers and the shared multi-tenant environment present special challenges for data protection and access control. Attribute-based encryption (ABE) not only protects data secrecy

but also has ciphertexts or decryption keys associated with fine-grained access policies that are automatically enforced during the decryption process. This enforcement puts data access under control at each data item level. However

ABE schemes have practical limitations on dynamic user revocation. In this paper

we propose two generic user revocation systems for ABE with user privacy protection

user revocation via ciphertext re-encryption (UR-CRE) and user revocation via cloud storage providers (UR-CSP)

which work with any type of ABE scheme to dynamically revoke users.

关键词

Keywords

references

N Attrapadung , , , B Libert , , , E de Panafieu . . Expressive key-policy attribute-based encryption with constant-size ciphertexts . . LNCS , , 2011 . . 6571 90 - - 108 . . DOI: 10.1007/978-3-642-19379-8_6 http://doi.org/10.1007/978-3-642-19379-8_6 . .

N Attrapadung , , , J Herranz , , , F Laguillaumie , , , 等 . . Attribute-based encryption schemes with constant-size ciphertexts . . Theor Comput Sci , , 2012 . . 422 ( ( 9 ): ): 15 - - 38 . . DOI: 10.1016/j.tcs.2011.12.004 http://doi.org/10.1016/j.tcs.2011.12.004 . .

MH Au , , , PP Tsang , , , W Susilo , , , 等 . . Dynamic universal accumulators for DDH groups and their application to attribute-based anonymous credential systems . . LNCS , , 2009 . . 5473 295 - - 308 . . DOI: 10.1007/978-3-642-00862-7_20 http://doi.org/10.1007/978-3-642-00862-7_20 . .

J Benaloh , , , M de Mare . . One-way accumulators: a decentralized alternative to digital signatures . . LNCS , , 1993 . . 765 274 - - 285 . . DOI: 10.1007/3-540-48285-7_24 http://doi.org/10.1007/3-540-48285-7_24 . .

J Bethencourt , , , A Sahai , , , B Waters . . Ciphertext-policy attribute-based encryption . . Proc IEEE Symp on Security and Privacy , , 2007 . . p.321 - - 334 . . DOI: 10.1109/SP.2007.11 http://doi.org/10.1109/SP.2007.11 . .

D Boneh , , , M Franklin . . Identity-based encryption from the Weil pairing . . SIAM J Comput , , 2003 . . 32 ( ( 3 ): ): 586 - - 615 . . DOI: 10.1137/S0097539701398521 http://doi.org/10.1137/S0097539701398521 . .

E Brickell , , , J Camenisch , , , LQ Chen . . Direct anonymous attestation . . Proc 11 th ACM Conf on Computer and Communications Security , , 2004 . . p.132 - - 145 . . DOI: 10.1145/1030083.1030103 http://doi.org/10.1145/1030083.1030103 . .

J Camenisch , , , A Lysyanskaya . . Dynamic accumulators and application to efficient revocation of anonymous credentials . . LNCS , , 2002 . . 2442 61 - - 76 . . DOI: 10.1007/3-540-45708-9_5 http://doi.org/10.1007/3-540-45708-9_5 . .

R Canetti , , , S Halevi , , , J Katz . . Chosen-ciphertext security from identity-based encryption . . LNCS , , 2004 . . 3027 207 - - 222 . . DOI: 10.1007/978-3-540-24676-3_13 http://doi.org/10.1007/978-3-540-24676-3_13 . .

M Carroll , , , A van der Merwe , , , P Kotzé . . Secure cloud computing: benefits, risks and controls . . Information Security South Africa , , 2011 . . p.1 - - 9 . . DOI: 10.1109/ISSA.2011.6027519 http://doi.org/10.1109/ISSA.2011.6027519 . .

M Chase . . Multi-authority attribute based encryption . . Proc 4 th Conf on Theory of Cryptography , , 2007 . . p.515 - - 534 . . DOI: 10.1007/978-3-540-70936-7_28 http://doi.org/10.1007/978-3-540-70936-7_28 . .

M Chase , , , SS Chow . . Improving privacy and security in multi-authority attribute-based encryption . . Proc 16 th ACM Conf on Computer and Communications Security , , 2009 . . p.121 - - 130 . . DOI: 10.1145/1653662.1653678 http://doi.org/10.1145/1653662.1653678 . .

C Chen , , , ZF Zhang , , , DG Feng . . Efficient ciphertext policy attribute-based encryption with constantsize ciphertext and constant computation-cost . . LNCS , , 2011 . . 6980 84 - - 101 . . DOI: 10.1007/978-3-642-24316-5_8 http://doi.org/10.1007/978-3-642-24316-5_8 . .

C Chen , , , J Chen , , , HW Lim , , , 等 . . Fully secure attributebased systems with short ciphertexts/signatures and threshold access structures . . LNCS , , 2013 . . 7779 50 - - 67 . . DOI: 10.1007/978-3-642-36095-4_4 http://doi.org/10.1007/978-3-642-36095-4_4 . .

L Cheung , , , C Newport . . Provably secure ciphertext policy ABE . . Proc 14 th ACM Conf on Computer and Communications Security , , 2007 . . p.456 - - 465 . . DOI: 10.1145/1315245.1315302 http://doi.org/10.1145/1315245.1315302 . .

R Chow , , , P Golle , , , M Jakobsson , , , 等 . . Controlling data in the cloud: outsourcing computation without outsourcing control . . Proc ACM Cloud Computing Security Workshop , , 2009 . . p.85 - - 90 . . DOI: 10.1145/1655008.1655020 http://doi.org/10.1145/1655008.1655020 . .

K Emura , , , A Miyaji , , , A Nomura , , , 等 . . A ciphertextpolicy attribute-based encryption scheme with constant ciphertext length . . LNCS , , 2009 . . 5451 13 - - 23 . . DOI: 10.1007/978-3-642-00843-6_2 http://doi.org/10.1007/978-3-642-00843-6_2 . .

J Gibson , , , R Rondeau , , , D Eveleig , , , 等 . . Benefits and challenges of three cloud computing service models . . 4 th Int Conf on Computational Aspects of Social Networks , , 2012 . . p.198 - - 205 . . DOI: 10.1109/CASoN.2012.6412402 http://doi.org/10.1109/CASoN.2012.6412402 . .

V Goyal , , , O Pandey , , , A Sahai , , , 等 . . Attribute-based encryption for fine-grained access control of encrypted data . . Proc 13 th ACM Conf on Computer and Communications Security , , 2006 . . p.89 - - 98 . . DOI: 10.1145/1180405.1180418 http://doi.org/10.1145/1180405.1180418 . .

V Goyal , , , A Jain , , , O Pandey , , , 等 . . Bounded ciphertext policy attribute based encryption . . LNCS , , 2008 . . 5126 579 - - 591 . . DOI: 10.1007/978-3-540-70583-3_47 http://doi.org/10.1007/978-3-540-70583-3_47 . .

JG Han , , , W Susilo , , , Y Mu , , , 等 . . Privacypreserving decentralized key-policy attribute-based encryption . . IEEE Trans Parall Distrib Syst , , 2012 . . 23 ( ( 11 ): ): 2150 - - 2162 . . DOI: 10.1109/TPDS.2012.50 http://doi.org/10.1109/TPDS.2012.50 . .

B Hayes . . Cloud computing . . Commun ACM , , 2008 . . 51 ( ( 7 ): ): 9 - - 11 . . DOI: 10.1145/1342327.1342330 http://doi.org/10.1145/1342327.1342330 . .

J Herranz , , , F Laguillaumie , , , C Ràfols . . Constant size ciphertexts in threshold attribute-based encryption . . LNCS , , 2010 . . 6056 19 - - 34 . . DOI: 10.1007/978-3-642-13013-7_2 http://doi.org/10.1007/978-3-642-13013-7_2 . .

J Hur , , , DK Noh . . Attribute-based access control with efficient revocation in data outsourcing systems . . IEEE Trans Parall Distrib Syst , , 2011 . . 22 ( ( 7 ): ): 1214 - - 1221 . . DOI: 10.1109/TPDS.2010.203 http://doi.org/10.1109/TPDS.2010.203 . .

L Ibraimi , , , Q Tang , , , P Hartel , , , 等 . . Efficient and provable secure ciphertext-policy attribute-based encryption schemes . . LNCS , , 2009 . . 5451 1 - - 12 . . DOI: 10.1007/978-3-642-00843-6_1 http://doi.org/10.1007/978-3-642-00843-6_1 . .

S Jahid , , , P Mittal , , , N Borisov . . Easier: encryption-based access control in social networks with efficient revocation . . Proc 6 th ACM Symp on Information, Computer and Communications Security , , 2011 . . p.411 - - 415 . . DOI: 10.1145/1966913.1966970 http://doi.org/10.1145/1966913.1966970 . .

P Junod , , , A Karlov . . An efficient public-key attributebased broadcast encryption scheme allowing arbitrary access policies . . Proc 10 th Annual ACM Workshop on Digital Rights Management , , 2010 . . p.13 - - 24 . . DOI: 10.1145/1866870.1866875 http://doi.org/10.1145/1866870.1866875 . .

M Karchmer , , , A Wigderson . . On span programs . . Proc 8 th Annual Structure in Complexity Theory Conf , , 1993 . . p.102 - - 111 . . DOI: 10.1109/SCT.1993.336536 http://doi.org/10.1109/SCT.1993.336536 . .

A Lewko , , , B Waters . . Decentralizing attribute-based encryption . . LNCS , , 2011 . . 6632 568 - - 588 . . DOI: 10.1007/978-3-642-20465-4_31 http://doi.org/10.1007/978-3-642-20465-4_31 . .

A Lewko , , , A Sahai , , , B Waters . . Revocation systems with very small private keys . . IEEE Symp on Security and Privacy , , 2010a . . p.273 - - 285 . . DOI: 10.1109/SP.2010.23 http://doi.org/10.1109/SP.2010.23 . .

A Lewko , , , T Okamoto , , , A Sahai , , , 等 . . Fully secure functional encryption: attribute-based encryption and (hierarchical) inner product encryption . . LNCS , , 2010b . . 6110 62 - - 91 . . DOI: 10.1007/978-3-642-13190-5_4 http://doi.org/10.1007/978-3-642-13190-5_4 . .

J Li , , , Q Huang , , , XF Chen , , , 等 . . Multi-authority ciphertext-policy attribute-based encryption with accountability . . Proc ACM Symp on Information, Computer and Communications Security , , 2011 . . p.386 - - 390 . . DOI: 10.1145/1966913.1966964 http://doi.org/10.1145/1966913.1966964 . .

H Lin , , , ZF Cao , , , XH Liang , , , 等 . . Secure threshold multi authority attribute based encryption without a central authority . . LNCS , , 2008 . . 5365 426 - - 436 . . DOI: 10.1007/978-3-540-89754-5_33 http://doi.org/10.1007/978-3-540-89754-5_33 . .

HG Miller , , , J Veiga . . Cloud computing: will commodity services benefit users long term . . IT Prof , , 2009 . . 11 ( ( 6 ): ): 57 - - 59 . . DOI: 10.1109/MITP.2009.117 http://doi.org/10.1109/MITP.2009.117 . .

L Nguyen . . Accumulators from bilinear pairings and applications . . LNCS , , 2005 . . 3376 275 - - 292 . . DOI: 10.1007/978-3-540-30574-3_19 http://doi.org/10.1007/978-3-540-30574-3_19 . .

T Okamoto , , , K Takashima . . Fully secure functional encryption with general relations from the decisional linear assumption . . LNCS , , 2010 . . 6223 191 - - 208 . . DOI: 10.1007/978-3-642-14623-7_11 http://doi.org/10.1007/978-3-642-14623-7_11 . .

R Ostrovsky , , , A Sahai , , , B Waters . . Attribute-based encryption with non-monotonic access structures . . Proc 14 th ACM Conf on Computer and Communications Security , , 2007 . . p.195 - - 203 . . DOI: 10.1145/1315245.1315270 http://doi.org/10.1145/1315245.1315270 . .

B Parno , , , M Raykova , , , V Vaikuntanathan . . How to delegate and verify in public: verifiable computation from attribute-based encryption . . LNCS , , 2012 . . 7194 422 - - 439 . . DOI: 10.1007/978-3-642-28914-9_24 http://doi.org/10.1007/978-3-642-28914-9_24 . .

M Pirretti , , , P Traynor , , , P McDaniel , , , 等 . . Secure attribute-based systems . . Proc 13 th ACM Conf on Computer and Communications Security , , 2006 . . p.99 - - 112 . . DOI: 10.1145/1180405.1180419 http://doi.org/10.1145/1180405.1180419 . .

K Ren , , , C Wang , , , Q Wang . . Security challenges for the public cloud . . IEEE Int Comput , , 2012 . . 16 ( ( 1 ): ): 69 - - 73 . . DOI: 10.1109/MIC.2012.14 http://doi.org/10.1109/MIC.2012.14 . .

A Sahai , , , B Waters . . Fuzzy identity-based encryption . . LNCS , , 2005 . . 3494 457 - - 473 . . DOI: 10.1007/11426639_27 http://doi.org/10.1007/11426639_27 . .

A Sahai , , , H Seyalioglu , , , B Waters . . Dynamic credentials and ciphertext delegation for attribute-based encryption . . LNCS , , 2012 . . 7417 199 - - 217 . . DOI: 10.1007/978-3-642-32009-5_13 http://doi.org/10.1007/978-3-642-32009-5_13 . .

A Shamir . . How to share a secret . . Commun ACM , , 1979 . . 22 ( ( 11 ): ): 612 - - 613 . . DOI: 10.1145/359168.359176 http://doi.org/10.1145/359168.359176 . .

C Wang , , , Q Wang , , , K Ren , , , 等 . . Ensuring data storage security in cloud computing . . 17 th Int Workshop on Quality of Service , , 2009 . . p.1 - - 9 . . DOI: 10.1109/IWQoS.2009.5201385 http://doi.org/10.1109/IWQoS.2009.5201385 . .

GJ Wang , , , Q Liu , , , J Wu , , , 等 . . Hierarchical attributebased encryption and scalable user revocation for sharing data in cloud servers . . Comput Secur , , 2011 . . 30 ( ( 5 ): ): 320 - - 331 . . DOI: 10.1016/j.cose.2011.05.006 http://doi.org/10.1016/j.cose.2011.05.006 . .

ZJ Wang , , , DJ Huang . . Privacy-preserving mobile crowd sensing in ad hoc networks . . Ad Hoc Networks , , 2018 . . 73 14 - - 26 . . DOI: 10.1016/j.adhoc.2018.02.003 http://doi.org/10.1016/j.adhoc.2018.02.003 . .

ZJ Wang , , , DJ Huang , , , HJ Wu , , , 等 . . Towards distributed privacy-preserving mobile access control . . IEEE Global Communications Conf , , 2014 . . p.582 - - 587 . . DOI: 10.1109/GLOCOM.2014.7036870 http://doi.org/10.1109/GLOCOM.2014.7036870 . .

ZJ Wang , , , DJ Huang , , , Y Zhu , , , 等 . . Efficient attributebased comparable data access control . . IEEE Trans Comput , , 2015 . . 64 ( ( 12 ): ): 3430 - - 3443 . . DOI: 10.1109/TC.2015.2401033 http://doi.org/10.1109/TC.2015.2401033 . .

B Waters . . Ciphertext-policy attribute-based encryption: an expressive, efficient, and provably secure realization . . LNCS , , 2011 . . 6571 53 - - 70 . . DOI: 10.1007/978-3-642-19379-8_4 http://doi.org/10.1007/978-3-642-19379-8_4 . .

A Weiss . . Computing in the clouds . . NetWorker , , 2007 . . 11 ( ( 4 ): ): 16 - - 25 . . DOI: 10.1145/1327512.1327513 http://doi.org/10.1145/1327512.1327513 . .

ZQ Xu , , , KM Martin . . Dynamic user revocation and key refreshing for attribute-based encryption in cloud storage . . 11 th IEEE Int Conf on Trust, Security and Privacy in Computing and Communications , , 2012 . . p.844 - - 849 . . DOI: 10.1109/TrustCom.2012.136 http://doi.org/10.1109/TrustCom.2012.136 . .

ZQ Xu , , , KM Martin . . A practical deployment framework for use of attribute-based encryption in data protection . . IEEE 10 th Int Conf on High Performance Computing and Communications & IEEE Int Conf on Embedded and Ubiquitous Computing , , 2013 . . p.1593 - - 1598 . . DOI: 10.1109/HPCC.and.EUC.2013.224 http://doi.org/10.1109/HPCC.and.EUC.2013.224 . .

K Yang , , , XH Jia , , , K Ren . . Attribute-based fine-grained access control with efficient revocation in cloud storage systems . . Proc 8 th ACM SIGSAC Symp on Information, Computer and Communications Security , , 2013 . . p.523 - - 528 . . DOI: 10.1145/2484313.2484383 http://doi.org/10.1145/2484313.2484383 . .

SC Yu , , , K Ren , , , WJ Lou . . Attribute-based content distribution with hidden policy . . 4 th Workshop on Secure Network Protocols , , 2008 . . p.39 - - 44 . . DOI: 10.1109/NPSEC.2008.4664879 http://doi.org/10.1109/NPSEC.2008.4664879 . .

SC Yu , , , C Wang , , , K Ren , , , 等 . . Achieving secure, scalable, and fine-grained data access control in cloud computing . . Proc IEEE INFOCOM , , 2010 . . p.534 - - 542 . . DOI: 10.1109/INFCOM.2010.5462174 http://doi.org/10.1109/INFCOM.2010.5462174 . .

浏览量

Downloads

CSCD

文章被引用时，请邮件提醒。

Submit

工具集

关联资源

Generic attribute revocation systems for attribute-based encryption in cloud storage

RCDS: a right-confirmable data-sharing model based on symbol mapping coding and blockchain

MULKASE: a novel approach for key-aggregate searchable encryption for multi-owner data