一种高效的基于属性的认证密钥协商协议

Efficient Attribute-based Authenticated Key Agreement Protocol

提出了一种新的基于密文策略的属性加密方案,其访问结构采用线性秘密共享矩阵(LSSS),可以描述任意访问结构;解密过程仅需要3个双线性运算,解密计算复杂度与属性集合大小无关,具有较高的计算效率。在标准模型下给出了方案的安全性证明。同时基于该属性加密方案,提出了一个高效的基于属性的认证密钥协商协议(ABAKA),该协议结合NAXOS技术,有效抵制了用户密钥的泄露。在ABeCK安全模型下给出了协议的安全性证明。最后的性能分析和实验结果验证了协议具有较高的计算效率。

A novel ciphertext-policy attribute-based encryption scheme was proposed.Employing Linear Secret Sharing Schemes （LSSS）,any access structure can be expressed.The decryption procedure needs only three bilinear maps resulting in more efficient computation irrespective of attributes set.The CP-ABE was proven to be selectively secure in the standard model under chosen plaintext attack.Based on the efficient scheme above,an efficient Attribute-based Authenticated Key Agreement Protocol （ABAKA） was proposed.Combined with NAXOS technique,the ABAKA can resist the leakage of the users＇ key.The proof was given in the ABeCK model.Finally the paper gave the analysis and experiment result of the computation overhead.