10 基于DAG区块链的密文策略属性加密模型

王静宇;董昊;

• 1:内蒙古科技大学信息工程学院

• 
  

摘要(Abstract)：

应用DAG区块链平台Byteball,融合CP-ABE加密算法,提出一种基于DAG区块链的密文策略属性加密模型.将模型中的请求触发动作交由DAG区块链平台接管,运用非图灵完备的智能合约限定用户的请求.对CP-ABE加密算法进行简化,模型中DU的属性由多个属性授权中心管理,密钥分发由数据发布的原机构自治管理.安全分析证实模型的层级架构、属性加密、合约算法安全.实验结果表明:模型较比传统链式区块链访问控制方案的单笔交易处理时间明显减少,改进的CP-ABE加密算法提升了模型在属性重密过程中的效率.

关键词(KeyWords)： DAG;CP-ABE;区块链;智能合约;大数据

基金项目(Foundation): 国家自然科学基金资助项目(61662056);; 内蒙古自治区自然科学基金资助项目(2020MS06009)

作者(Author): 王静宇;董昊;

Email:

DOI: 10.16559/j.cnki.2095-2295.2021.04.010

参考文献(References)：

• [1] Goyal V,Pandey O,Sahai A,et al. Attribute-based encryption for fine-grained access control of encrypted data[C]//Proceedings of the 13th ACM conference on Computer and communications security. CCS 2006,Alexan dria,VA,USA:ACM,2006:89. [2] Bethencourt J,Sahai A,Waters B. Ciphertext-policy attribute-based encryption[C]//2007 IEEE symposium on security and privacy(SP'07). CA,USA:IEEE,2007:321. [3] Liang X,Li X,Lu R,et al. An efficient and secure user revocation scheme in mobile social networks[C]//2011IEEE global telecommunications Conference-GLOBECOM. TX,USA:IEEE,2011:1. [4] Attrapadung N,Imai H. Conjunctive broadcast and attribute-based encryption[C]//International conference on pairing-based cryptography. Berlin, Heidelberg:Springer,2009:248. [5] Pirretti M,Traynor P,McDaniel P,et al. Secure attribute-based systems[J]. Journal of Computer Security,2010,18(5):799. [6] Wu Q. A generic construction of ciphertext-policy attribute-based encryption supporting attribute revocation[J].China Communications,2014,11(13):93. [7] Chase M,Chow S S M. Improving privacy and security in multi-authority attribute-based encryption[C]//Proceedings of the 16th conference on computer and communications security. NY USA:ACM,2009:121. [8] Liu K,Desai H,Kagal L,et al. Enforceable data sharing agreements using smart contracts[J]. ar Xiv preprint ar Xiv:1804. 10645,2018. [9] Lin C,He D,Huang X,et al. BSe In:A blockchainbased secure mutual authentication with fine-grained access control system for industry 4. 0[J]. Journal of Network and Computer Applications,2018,116:42. [10] Wang S,Wang X,Zhang Y. A secure cloud storage framework with access control based on blockchain[J].IEEE Access,2019,7:112713. [11] Poon J,Dryja T. The bitcoin lightning network:scalable off-chain instant payments[J]. https://lightning.network/lightningnetwork-paper. pdf,2016-04-19. [12] Lerner S. Dag Coin draft,2015[J]. https://bitslog. files.wordpress. com/2015/09/dagcoin-v41. pdf,2015-01-18. [13] Churyumov A. Byteball:A decentralized system for storage and transfer of value[J]. https://byteball. org/Byteball. pdf,2016-05-08. [14]王静宇，周雪娟．一种支持属性撤销的密文策略属性基加密方案[J/OL]．计算机工程:1-7[2021-03-10].https://doi. org/10. 19678/j. issn. 1000. 0058105. [15]刘帆，杨明．一种用于云存储的密文策略属性基加密方案[J]．计算机应用研究，2012,29(04):1452. [16]谭跃生，章世杨，王静宇．基于多授权中心的CP-ABE属性撤销方案[J]．计算机工程与应用，2019,55(13):78. [17]曹源，丁兆云，姜新文，等．DAG区块链技术:原理与实践[M]．北京:机械工业出版社，2018:32. [18] Boneh D,Franklin M. Identity-based encryption from the weil pairing[C]//Annual international cryptology conference. Berlin,Heidelberg:Springer,2001:213. [19]邱云翔，张红霞，曹琪，章建聪，陈兴蜀，金泓键．基于CP-ABE算法的区块链数据访问控制方案[J]．网络与信息安全学报，2020,6(03):88.