策略隐藏的高效多授权机构CP-ABE物联网数据共享方案

Efficient Multi-Authority CP-ABE IoT Data Sharing Scheme with Hidden Policies

物联网环境下的数据共享存在效率低下、隐私泄露等问题,以及基于密文策略的属性基加密(ciphertext policy attribute-based encryption,CP-ABE)数据共享方案因采用单授权机构,需要承担繁重的计算工作而成为系统运行效率的瓶颈.为解决上述问题,提出一种策略完全隐藏的高效多授权机构CP-ABE物联网数据共享方案.该方案利用多授权机构CP-ABE实现数据的细粒度访问控制,利用联盟链不可篡改的特性保证密文哈希值和密钥集合密文的安全,采用MurmurHash3算法实现策略的完全隐藏,避免访问策略泄露用户隐私信息;并结合多秘密共享算法改进多授权机构CP-ABE,进而提升数据共享的效率.理论分析证明该方案能够保证访问策略和秘密共享过程的安全性.仿真实验结果表明,所提方案在策略隐藏和秘密分发过程中都具有较好的性能.

Data sharing in the IoT environment suffers from inefficiency and privacy leakage,and the CP-ABE(ciphertext policy attribute-based encryption)data sharing scheme becomes a bottleneck of system operation efficiency because it adopts a single authority,which needs to undertake heavy computational work.To solve the above problems,an efficient multi-authority CP-ABE IoT data sharing scheme with completely hidden policies is proposed in this paper.The scheme uses multi-authority CP-ABE to realize fine-grained access control of data,and uses the non-tampering property of the consortium blockchain to ensure the security of ciphertext Hash and key set ciphertext,and adopts MurmurHash3 algorithm to realize the complete hiding of policy to avoid accessing policy to leak users’private information;and the scheme combines with multi-secret sharing algorithm to improve multi-authority CP-ABE,thus enhancing efficiency of data sharing.The theoretical analysis proves that the scheme can guarantee the security of access policy and secret sharing process.The simulation experimental results show that the proposed scheme has better performance in both policy hiding and secret distribution processes.