一种改进条件广播代理重加密的数据共享方案

Improved data sharing scheme based on conditional broadcast proxy re-encryptionn

传统的条件广播代理重加密数据共享方式过度依赖不可信第三方代理商,存在效率低、数据安全和隐私泄露等问题。针对以上问题,提出了一种将条件广播代理重加密与区块链共识机制相结合的信息安全保障方案。首先,为解决单个代理商的单点故障以及合谋攻击问题,所提方案使用区块链节点轮流担任代理商节点,同时利用融合信誉机制的委托权益证明共识算法筛选出高信誉度的代理商节点参与重加密过程,大大降低了单点故障和合谋攻击的风险。其次,针对代理商节点对重加密密钥使用的高权限问题,引入门限密钥思想,将重加密密钥分割为多个片段,这些片段分布于不同的代理商节点上。通过这种方式,任何单个代理商节点都无法单独完成数据的解密,从而有效提高了重加密过程的安全性。最后,通过对方案的安全性、正确性和可信度进行分析,表明提出的方案能有效解决传统方案中的安全隐患。仿真实验结果证明,与现有数据共享方案相比,所提方案在保障数据安全方面具有明显优势,同时计算成本较低。

Traditional conditional broadcast proxy re-encryption data sharing approaches over-rely on untrustworthy third-party proxy servers,which leads to issues of a low efficiency,data security and privacy leaks.To address the above problems,this paper proposes an information security protection scheme that combines conditional broadcast proxy re-encryption with blockchain consensus mechanisms.First,to solve the single point of failure and collusion attacks of individual proxy servers,this scheme uses blockchain nodes to take turns to act as proxy servers.At the same time,it selects high-credibility proxy servers to participate in re-encryption through the Delegated Proof of Stake(DPoS)consensus algorithm that integrates credibility mechanisms,greatly reducing the risks of the single point of failure and collusion attacks.Second,to address the high permission issue of proxy servers using re-encryption keys,this paper introduces the threshold cryptosystem concept and splits the re-encryption key into multiple fragments distributed across different proxy servers.In this way,any single proxy server is unable to decrypt data independently,thus effectively improving the security of the re-encryption process.Finally,through the analysis of the security,correctness and credibility of the scheme,it is demonstrated that this scheme can effectively solve security vulnerabilities in traditional schemes.Related simulation experimental results also prove that compared with existing data sharing schemes,this scheme has significant advantages in ensuring data security while having lower computational costs.