基于抗泄漏无证书的智能电网隐私保护协议

Data Aggregation and Privacy Protection Protocol Based on Anti-Leakage Certificateless Homomorphic Encryption for Smart Grid

作为下一代电力系统,智能电网显著提高了电力服务的可靠性,效率,安全性和可持续性。智能电网技术的进步使得智能电网中的用户可以实时收集用电数据,有助于高效调控当地电力,但也易导致用户信息泄露。如何平衡用户实时电量数据与保护用户隐私是一个至关重要的问题,其中数据聚合和隐私保护是一个可行的解决方案。但是大多数现有的数据聚合方案都依赖于可信第三方,存在密钥托管的风险。文中设计了一个基于抗泄漏无证书同态加密的用户电力数据聚合和隐私保护协议,该协议主要将弹性泄露密码体制与无证书同态加密技术相结合,既可以避免密钥托管问题又可以实现密钥抗泄露。安全性分析证明了该协议在若干攻击模型下的有效性,可以满足若干安全要求,在一定程度上保护了电网的安全。

As the next generation of power systems,smart grids significantly improve the reliability,efficiency,security and sustainability of power service.With the development of smart grid technology,users can collect power usage data in real-time,which is conducive to the efficient regulation of local power,but it also leads to the leakage of user information.How to balance users’real-time power data and protect users’privacy is a crucial issue,where data aggregation and privacy protection could be a feasible solution.However,most of the existing data aggregation schemes rely on a trusted third party and are subject to the risk of key escrow.Therefore,we design a data aggregation and privacy protection protocol based on anti-leakage certificateless homomorphic encryption,which combines the resilient leakage cryptosystem with the certificateless homomorphic encryption technology to avoid the key escrow problem and realize the anti-leakage of keys.Security analysis shows that this protocol is effective under several attack models,which can meet some security requirements and protect the security of the grid to a certain extent.