云雾环境下可追责可撤销的属性基加密方案研究

Research on traceable and revocable attribute-based encryption scheme in cloud-fog environment

随着物联网设备产生的数据激增,一种称为雾计算的新范式已经发展起来,其可以在边缘处理和分析数据。云计算和雾计算一起被用于巨大的存储和处理资源。而现有的CP-ABE方案不太适合云雾物联网环境,因为不能同时提供以下功能:抗密钥托管、属性撤销、恶意用户追责和复杂操作的外包。因此,本文提出了一种云雾环境下可追责可撤销的数据安全共享方案,该方案支持密钥抗托管、属性撤销和恶意用户追责功能。通过将复杂的加解密、属性撤销和恶意用户追责的任务外包给第三方,为物联网设备留下恒定且少量的计算量。同时,所提方案只更新那些与撤销属性相关联的关键组件和密文,实现多层次撤销,提高其撤销效率。该方案与现有的CP-ABE方案不同,用户持有一个恒定大小的密钥,该密钥在整个过程中保持不变。该方案性能分析表明,所提方案是安全高效的,适用于资源受限的物联网设备。

With the explosion of data generated by IoT devices,a new paradigm called fog computing has been developed,which can process and analyze data at the edge.Cloud computing and fog computing are used together for huge storage and processing resources.However,the existing CP-ABE solutions are not suitable for the cloud IOT environment,because they cannot simultaneously provide the following functions:anti key escrow,attribute revocation,malicious user accountability,and outsourcing of complex operations.Therefore,this paper proposes a data security sharing scheme with accountability and revocation in cloud environment,which supports key anti trust,attribute revocation and malicious user accountability.By outsourcing complex encryption and decryption,attribute revocation,and malicious user accountability tasks to a third party,IoT devices are left with a constant and small amount of computing.At the same time,the proposed scheme only updates the key components and ciphertext associated with the revocation attribute to achieve multi-level revocation and improve its revocation efficiency.This scheme is different from the existing CP-ABE scheme.The user holds a constant size key,which remains unchanged throughout the process.The performance analysis of this scheme shows that the proposed scheme is safe,efficient,and suitable for resource constrained IoT devices.