智能交通系统中具有隐私保护性的属性基可搜索加密方案

Privacy Preseving Attribute Based Searchable Encryption Scheme in Intelligent Transportation System

针对智能交通系统(ITS)中车载用户出行信息容易被非法盗用、交通系统云端服务器存储的交通数据被恶意用户非法滥用等问题,该文提出一种新的属性基可搜索加密(ABSE)方案,该方案具有隐私保护、密钥聚合和轻量计算等功能。该方案在密钥生成阶段、访问控制阶段和部分解密阶段实现了全隐私保护;将搜索关键字嵌入到访问结构中,在实现部分策略隐藏的同时保证了关键字安全;通过密钥聚合技术,将所有满足搜索条件和访问策略的文件标识聚合成一个聚合密钥,减轻用户的密钥存储负担,保障文件密钥安全的同时进一步保障了数据安全。安全性分析表明,该方案具有隐藏访问结构安全、关键字密文不可区分安全和陷门不可区分安全。理论分析和数值模拟显示所提方案在通信和计算方面的开销是高效且实用的。

In order to solve the problem that the travel information of vehicle users in Intelligent Transportation System(ITS)is easy to be illegally stolen and the traffic data stored in the cloud server of transportation system is abused by malicious users,a new Attribute Based Searchable Encryption(ABSE)scheme is proposed in this paper,which has the functions of privacy protection,key aggregation and lightweight calculation.The scheme realizes full privacy protection in key generation stage,access control stage and partial decryption stage.The search keyword is embedded into the access structure,which can realize partial policy hiding and keyword security.Through key aggregation technology,all file identities that meet the search conditions and access policies are aggregated into one aggregate key,which reduces the burden of key storage for users,and further ensures the security of file keys and data.The security analysis shows that the scheme has the advantages of hidden access structure security,keyword ciphertext indistinguishable security and trapdoor indistinguishable security.The theoretical analysis and numerical simulation showed the proposed scheme was efficient and practical in terms of communication and computing overhead.