一种无需全局ID抗共谋攻击的属性加密算法及其在传感器网络中的应用

Free Global ID Against Collusion Attack on Attribute-based Encryption for Sensor Networks

针对多中心基于属性的加密(attribute-based encryption,ABE)算法容易遭受共谋攻击的问题,首先根据用户属性与解密阈值之间的关系,将用户请求密钥的行为形式化地分为合法和共谋行为,然后提出了第一个无需全局ID(global ID,GID)的ABE算法。该算法要求每个属性中心在一个可信中心的配合下对用户请求进行安全检查,使得只有合法用户才能解密消息,而共谋者则无法解密。安全分析和实验结果表明,作者提出的算法不仅能够保护用户隐私不被泄露,而且没有明显增加传感器节点的通信开销和数据传输时延。

In order to solve the problem that multi-authority attribute-based encryption（ABE） is vulnerable to collusion attack,firstly,user behaviours of making request for key were formulized into legality and collusion according to the relationship between user＇s attribute and decryption threshold.Furthermore,a free Global ID（GID） ABE algorithm was proposed,where each attribute authority is required to run a security check for users＇requests with the help of a trusted central authority,so that only legal user has power to decrypt message instead of colluders.The results of security analysis and performance evaluation showed that the proposed algorithm not only improves user＇s privacy,but also doesn＇t evidently increase communication overhead incurred by the node and the delay of transmitting node in wireless sensor networks（WSNs）,and it is suitable for WSNs.