云计算多授权机构的属性基加密方案

Attribute-based Encryption Scheme of Cloud Computing Multi-authority

现有属性基加密方案多以单一授权机构为主,一旦单授权中心受到攻击则整个系统的数据安全均无法得到保障。为提高整个系统的安全性,解决单授权机构易造成系统瓶颈的问题,提出一种多授权机构的属性基加密方案。该方案通过多授权机构分散管理属性以提高系统安全性;在用户访问请求阶段就预先判断是否需要发送密文,以此降低部分用户端计算开销。通过安全性分析证明该方案的安全性。与传统方案对比,结果显示,该方案在解密过程中节省了部分计算开销。

The existing attribute-based encryption schemes are mostly based on a single authorized institution. Once a single authorized center is attacked,the data security in the entire system cannot be guaranteed. In order to improve the security of the entire system and to solve the problem that a single authorization organization is likely to cause system bottlenecks,this paper presents an attribute-based encryption scheme for multiple authorization organizations. This scheme improves the security of the system by decentralizing the management attributes of multiple authorization agencies;it reduces the computing overhead of some users by judging in advance whether the cipher text needs to be sent at the user access request stage. Finally,the security of this scheme is proved by security analysis. Compared with the traditional scheme,this scheme saves some computing overhead during the decryption process.