基于时间限制的用户撤销CP-ABE方案

Time-based User Revocation CP-ABE Scheme

用户撤销是属性基加密中的一个主要环节,但现有的用户撤销方案都采用重新加密和更新密钥来实施用户撤销,导致方案安全性差或计算量大.因此,本文提出一种基于时间限制的用户撤销密文策略属性基加密方案.方案中对每个用户指定一个访问数据的有效期,一旦有效期到期,用户就无法访问数据,从而实现用户的定时撤销.为了防止有效期的篡改或伪造,使用了短签名方法,从而提高了数据的安全性,并且有效地降低整个算法的计算量.

User revocation is an essential part of attribute-based encryption.However,existing user revocation schemes use re-encryption and key update to enforce user revocation,resulting in poor security or a large amount of computation.Therefore proposes a time-based user revocation CP-ABE(Ciphertext-Policy Attribute-Based Encryption)scheme.In this scheme,each user is assigned a validity period for accessing data.Once the validity period expires,the user will not be able to access the data,thus realizing the user’s time-based revocation.To prevent tampering or forging the validity period,a short signature method is used,which improves the security of the data and reduces the computational complexity of the whole algorithm effectively.