支持丰富访问控制策略的群组协作密文策略属性基加密

Group-oriented ciphertext-policy attribute-based encryption with expressive access policy

在对传统的属性基加密研究的基础上,提出了一个支持面向群组协作的密文策略属性基加密方案。在方案中,访问控制策略由"与"和"或"逻辑门构成,用户被划分为不同的群组,只有来自同一群组的用户且他们的属性集合满足密文中的访问控制策略才能成功合作解密密文;针对来自不同群组的用户,即使他们的属性集合满足访问策略,也不能合作解密。定义了方案的算法和安全模型,并给出了具体的方案构造和安全性证明。

Based on the study of the traditional attribute-based encryption, a scheme called group-oriented cipher- text-policy attribute-based encryption was proposed. In the scheme, the access policy consists of AND-gate and OR-gate. Users were split up into different groups. Users from the same group can merge their attributes to decrypt successfully, if the union of their attributes satisfies the access structure embedded in the ciphertext. But users from different groups cannot realize this cooperative decryption. A concrete construction and security model was given. Finally, the security proof for the proposed scheme was given.