摘要
在不可信环境下实现安全的数据共享一直是一个难题,传统中心化方案存在数据容易被泄露、数据容易被篡改、数据去向难以追踪、监管难度大等问题。公钥体制下的数据共享方案则存在通信代价、计算开销大,实用性差等问题。针对上述问题,文章提出一个基于区块链的数据共享方案。该方案通过区块链维护一个可信账本来保证数据的可追溯性,同时也保证了访问控制权限的不可篡改。在此基础上构建了基于Schnorr的代理重加密方案,通过一个代理重加密密钥实现了数据的安全共享。文章所提方案相比传统方案有较好的安全性和可追溯性,且已成功应用于医疗数据共享项目中。
Achieving secure data sharing in an untrusted environment is always a difficult problem.Traditional centralized solutions have problems that data is easily leaked,data is easily tampered,data destination is difficult to track,and supervision is difficult.Data sharing scheme based on public-key system has some problems such as high communication cost,high computation cost and poor practicability.To solve the above problems,this paper proposes a data sharing scheme based on blockchain.The scheme maintains a credible ledger through the blockchain to ensure the traceability of data and immutability of the access control authority.On this basis,a proxy re-encryption scheme based on Schnorr is constructed,which realizes the secure data sharing by a proxy re-encryption secret key.Compared with the traditional schemes,the proposed scheme has better security and traceability,and has been successfully applied in the medical data sharing project.
作者
李莉
曾庆贤
文义红
王士成
LI Li;ZENG Qingxian;WEN Yihong;WANG Shicheng(School of Cyber Science and Engineering,Wuhan University,Wuhan 430072,China;The 54th Research Institute of China Electronics Technology Group Corporation,Shijiazhuang 050081,China)
出处
《信息网络安全》
CSCD
北大核心
2020年第8期16-24,共9页
Netinfo Security
基金
国家重点研发计划[2018YFC1315404]。