适用于云存储的并行无证书代理重加密方案

On Parallel Certificateless Proxy Re-Encryption Scheme for Secure Cloud Data Sharing

为了保证云存储中数据的安全访问控制,并基于CPU已进入多核阶段的现状,将并行计算思想用于代理重加密算法中,提出了一个并行代理重加密方案(PCL-PRE).数据拥有者使用对称加密密钥(DEK)加密敏感数据,同时使用代理重加密算法加密该DEK,将这些加密内容存储于云存储中心.云存储中心作为半可信的代理节点,根据访问控制列表,将数据拥有者的DEK进行代理加密,转化为多个接收者可以用自己私钥解密的密文,而在整个过程中都无法获取任何明文信息.接收者收到密文后,即可解密.该方案使用随机数复用技术,对消息进行优化并行,并结合密文聚合,进一步提高了传输效率.实验表明,并行代理重加密方案具有明显的效率优势.

Aimed to secure data access control in cloud storage, and based on the situation that C PU hasentered the reality of m ulti-core, parallel com puting idea into the proxy re-encryption has been introduced,and a parallel certificateless proxy re-encryption （P C L -PR E ） schem e proposed. T he data ow ner encrypts inparallel the sensitive data w ith his own public key and uploads the encrypted data to the sem i-trusted proxyin cloud. W hile according to the Access Control List （A C L ） , the proxy transform s the encrypted ciphertextinto a ciphertext of the sam e m essage that could be decrypted by receivers! secret key, but the proxycannot obtain any inform ation about the m essage. A fter receiving the the converted decrypted data, the receiverscan subsequently get the plain text. T he m essages are optim ized parallel w ith random ness reusingand cipher text aggregation, w hich will reduce the com putation and transm ission overheads further. E xperiment result show s that com pared w ith other existing CL-PRE schem es, the schem e is very efficient.