首页|基于零知识证明的虚拟电厂多场景下用户属性隐私保护

基于零知识证明的虚拟电厂多场景下用户属性隐私保护

扫码查看
虚拟电厂采集存储了海量电力用户数据,涉及查询、交易、测试、共享等不同业务场景,给用户信息安全带来了巨大风险.现有的用户隐私保护方案大多采用传统的属性基加密(attribute-based encryption,ABE),不需要为每个接收者单独进行加密操作,支持细粒度的访问控制需求.然而使用 ABE 方法需要访问者输入自身属性,数据共享的过程是公开的,用户的属性隐私、加密数据的访问策略和其他用户私人信息可能通过分析相关记录而被泄露.为此,文章提出基于零知识证明的用户属性隐私保护.该方案基于分布式属性基加密(distributed attribute-based encryption,DABE)技术,引入Merkel树聚合用户属性,使用Merkel根构建承诺,用于零知识证明验证,在不暴露用户属性和文件访问策略的前提下实现属性基加密的访问控制策略.同时,将属性与用户地址绑定,有效避免中间人攻击和重放攻击.通过安全性分析,证明本方案具有属性不可分辨性和属性防篡改性.将所提方案与现有方法进行实验比较,结果表明,所提方案在时间成本和空间占用方面性能更好.
Multi-scenarios in Virtual Plant With User Attribute Privacy Protection Using Zero-knowledge Proofs
Virtual power plants collect and store massive amounts of electricity user data.These data involve various business scenarios such as queries,transactions,tests,and sharing,which pose significant risks to user information security.Most existing user privacy protection solutions use traditional attribute-based encryption(ABE),which does not re-quire encryption operations for each recipient individually and supports fine-grained access control requirements.However,using the ABE method requires visitors to input their own attributes.The process of data sharing is public.User attribute privacy,access policies for encrypted data,and other users'private information may be leaked through the analysis of relevant records.Therefore,we propose user attribute privacy protection based on zero-knowledge proof.This scheme is based on distributed attribute-based encryption(DABE)technology.We introduce Merkel tree to aggregate user attributes,use Merkel root to construct commitments,and use them for zero-knowledge proof veri-fication.This method implements access control policies for attribute-based encryption without exposing user attrib-utes and file access policies.At the same time,attributes are bound to user addresses,effectively preventing man-in-the-middle attacks and replay attacks.Through security analysis,it is proven that this solution has attribute indistinguishability and attribute tamper resistance.We compare this scheme with existing methods in experiments.The results show that this scheme performs better in terms of time cost and space occupation.

zero-knowledge proofattribute hidingvirtual power plantprivacy protectionattribute-based encryption

杨如侠、石聪聪、费稼轩、王向群、陈磊、肖云杰

展开 >

中国电力科学研究院有限公司,北京市 海淀区 100192

国网上海市电力公司,上海市 浦东新区 200122

零知识证明 属性隐藏 虚拟电厂 隐私保护 属性基加密

国家重点研发计划项目

2021YFB2401200

2024

电力信息与通信技术
中国电力科学研究院

电力信息与通信技术

CSTPCD
影响因子:0.699
ISSN:1672-4844
年,卷(期):2024.22(9)