移动社交网络中基于属性加密的隐私保护方案

A Privacy Protection Scheme Based on Attribute Encryption in Mobile Social Networks

为了保护用户在移动社交网络中的个人信息和交友偏好等隐私,该文提出支持外包解密的基于密文策略的属性基加密(CP-ABE)方案。在该方案中,将用户的交友偏好和自我描述分别生成属性列表,通过将交友偏好转换为密文控制策略,自我描述转化为属性密钥来隐藏属性,从而实现隐私保护。该方案提出了先匹配后解密的算法机制:社交平台对用户信息进行匹配验证,当满足相应的匹配条件时,该算法将计算量较大的双线性对运算外包给交友中心,之后用户再对密文解密。通过快速排除不匹配用户,避免了无效解密。外包解密在保护信息的同时,减少了移动设备的计算负担和通信开销。安全性分析表明,该方案是安全有效的,此外性能评估显示所提方案在计算和通信开销方面是高效且实用的。

In order to protect the privacy of users′personal information and friend preferences in social networks,a Ciphertext-Policy Attribute Based Encryption(CP-ABE)scheme that supports outsourced decryption is proposed.In this scheme,attribute lists are generated for the users′dating preference and selfdescription respectively,and attributes are hidden by converting the dating preference into ciphertext control policy and self-description into attribute key,thus realizing privacy protection.The proposed algorithm mechanism matches users′information and then decrypts it.Users′information is matched and verified by social platform.When the corresponding matching conditions are met,the algorithm outsources the computationally expensive bilinear pairing operation to the dating center.The user then decrypts the ciphertext.Invalid decryption is avoided by quickly eliminating mismatched users.Outsourced decryption reduces the computational burden and communication overhead of mobile devices while protecting information.Security analysis shows that the scheme is safe and effective,furthermore,performance evaluation shows that the proposed scheme is efficient and practical in terms of computational and communication overhead.