首页|一种改进条件广播代理重加密的数据共享方案

一种改进条件广播代理重加密的数据共享方案

扫码查看
原文链接
  • 国家科技期刊平台
  • NETL
  • NSTL
  • 万方数据
  • 维普
传统的条件广播代理重加密数据共享方式过度依赖不可信第三方代理商,存在效率低、数据安全和隐私泄露等问题.针对以上问题,提出了一种将条件广播代理重加密与区块链共识机制相结合的信息安全保障方案.首先,为解决单个代理商的单点故障以及合谋攻击问题,所提方案使用区块链节点轮流担任代理商节点,同时利用融合信誉机制的委托权益证明共识算法筛选出高信誉度的代理商节点参与重加密过程,大大降低了单点故障和合谋攻击的风险.其次,针对代理商节点对重加密密钥使用的高权限问题,引入门限密钥思想,将重加密密钥分割为多个片段,这些片段分布于不同的代理商节点上.通过这种方式,任何单个代理商节点都无法单独完成数据的解密,从而有效提高了重加密过程的安全性.最后,通过对方案的安全性、正确性和可信度进行分析,表明提出的方案能有效解决传统方案中的安全隐患.仿真实验结果证明,与现有数据共享方案相比,所提方案在保障数据安全方面具有明显优势,同时计算成本较低.
Improved data sharing scheme based on conditional broadcast proxy re-encryptionn
Traditional conditional broadcast proxy re-encryption data sharing approaches over-rely on untrustworthy third-party proxy servers,which leads to issues of a low efficiency,data security and privacy leaks.To address the above problems,this paper proposes an information security protection scheme that combines conditional broadcast proxy re-encryption with blockchain consensus mechanisms.First,to solve the single point of failure and collusion attacks of individual proxy servers,this scheme uses blockchain nodes to take turns to act as proxy servers.At the same time,it selects high-credibility proxy servers to participate in re-encryption through the Delegated Proof of Stake(DPoS)consensus algorithm that integrates credibility mechanisms,greatly reducing the risks of the single point of failure and collusion attacks.Second,to address the high permission issue of proxy servers using re-encryption keys,this paper introduces the threshold cryptosystem concept and splits the re-encryption key into multiple fragments distributed across different proxy servers.In this way,any single proxy server is unable to decrypt data independently,thus effectively improving the security of the re-encryption process.Finally,through the analysis of the security,correctness and credibility of the scheme,it is demonstrated that this scheme can effectively solve security vulnerabilities in traditional schemes.Related simulation experimental results also prove that compared with existing data sharing schemes,this scheme has significant advantages in ensuring data security while having lower computational costs.

conditional broadcast proxy re-encryptionthreshold keyblockchainconsensus mechanism

翟社平、陆娴婧、霍媛媛、杨锐

展开 >

西安邮电大学 计算机学院,陕西 西安 710121

西安邮电大学 陕西省网络数据分析与智能处理重点实验室,陕西 西安 710121

条件广播代理重加密 门限密钥 区块链 共识机制

国家自然科学基金工业和信息化部通信软科学项目陕西省重点研发项目陕西省教育厅科学研究项目陕西省教育厅科学研究计划陕西省社会科学基金西安市社会科学规划基金陕西省大学生创新创业训练计划西安邮电大学研究生创新基金

613731162018-R-262022GY-03818JK069718JK06972016N00817X63202211664016CXJJYL2021050

2024

10.19665/j.issn1001-2400.20230410

西安电子科技大学学报(自然科学版)
西安电子科技大学

西安电子科技大学学报(自然科学版)

CSTPCD北大核心
影响因子：0.837
ISSN：1001-2400
年,卷(期)：2024.51(2)
  • 25