Multi-element based on proxy re-encryption scheme for mobile cloud computing

Transcription

1 36 11 Vol.36 No Jounal on Communcatons Novembe 015 do: /.ssn x TP309. A Mult-element based on poxy e-encypton scheme fo moble cloud computng SU Mang 1, SHI Guo-zhen, XIE Rong-na, FU An-mn 1 (1. School of Compute Scence and Engneeng, Nanng Unvesty of Scence and Technology, Nanng 10094, Chna;. Depatment of Infomaton Secuty, Beng Electonc Scence and Technology Insttute, Beng , Chna) Abstact: The ntegaton of the cloud and moble computng make uses obtan the data and the sevce moe convenently and effcently. Howeve, because of the openness of cloud platfom and moble communcaton netwok, how to mplement the secuty access and usage of data fo moble cloud computng has to be solved ugently now. An mult-element access contol condton based on poxy e-encypton scheme fo the secuty equement of moble cloud computng was poposed, whch was conssted of system model, algothm and the descpton of e-encypton keys. In ths scheme, data cente n cloud obtaned the obectve access contol condton of uses based on the access equest, and geneated the coespondng e-encypton cphe fo the uses. The pvate key of the uses could be used to decypt the cphe. The scheme has acheved the taget of mult-element poxy e-encypton wthout nceasng the amount of uses' pvate keys n moble cloud computng. Key wods: moble cloud computng; mult-element access contol; poxy e-encypton; descpton of e-encypton key ,615755,61035BK , BK Foundaton Items: The Natonal Natual Scence Foundaton of Chna ( , , 61035); The Natual Scence Foundaton of Jangsu Povnce (BK , BK ); The Natual Scence Foundaton of Beng (415048)

2 74 36 [1] [] [3] (PRE, poxy e-encypton) PRE [4] IBE (IBPRE)[5] [6] [7] [8] [9] [8] [10] 3 1 (CSP, cloud sevce povde)

3 11 75 CSP ) 7, Setup( K) paam K p G 1, G g G 1 H 1, H, H 3, H 4 H :{0,1} G, H Z H : G {0,1} l, 3 :{0,1}, p H 1 1 :{0,1} G

4 76 36 paam = { p, G, G, g, H ( = 1,,4)} 1 condton = {0,1} e : 1 1 G G G KeyGen( paam) ( sk, pk ) x, x Z sk =x pk g pk x x = sk =x p = g Enc( m, pk ) C pk m k G = H ( m k) C c c c c c = (,,,, ) c = g ; 1 c = ke( pk, H ( pk )) ; 1 c = m H ( k); c = H ( pk ); 4 1 c = H ( c c c c ) RekeyGen( sk, pk, condton) k condton condton condton sk (,, ( ) ( ) k = pk pk H pk condton H pk, g ) 1 1 condton ReEnc( C, k ) C C sk C = ( c, c, c, c, c ) e( c , H 4 ( c 1 c c 3 c 4 )) = e( g, c ) 5 c = c ; 1 1 sk c = c ( pk g, H ( pk ) ) e( pk, 1 sk H pk condton H pk 1 1 = ke( pk, H ( pk condton)); ( ) ( ) ) c = c ; c = H ( pk ); c = H ( c, c, c, c ) Dec ( sk, C ) m 1 m e( c, H ( c c c c )) = d( g, c ) c k = sk e( c, c ) 1 3 m = c H ( k) ; = H ( m k) c 1 = g c = ke g c 4 sk (, )

5 11 77 m Dec ( sk, C, dondton ) m m e( c 1, H 4 ( c 1 c c 3 c 4 )) = e( g, c 5 ) c k = sk e( c, H ( pk condton)) 1 1 m = c H ( k) ; = H ( m k) c = g c 1 = ke( pk, H ( pk condton)) m XML XML 1) [10] 4 4 ) ID 5 3 Subect( Role, T, E, Att) Ob( Att, data, lfe) 5 H sc H oc condton

6 [8] CCA condton sk (,, ( ) ( ) k = pk pk H pk condton H pk, g ) 1 1 sk sk = log H ( pk ) H1 ( pk ) 1 n n n 1 t 1 t O(1) O(3t 1 +t ) O(4t 1 +t )O(t 1 +4t ) O(3t 1 +4t ) 5. 1 [4,6] [11] [1] [13] PRE (TmePRE) 6 1 [4] [11] [6] [1] TmePRE

7 11 79 [1],,,. [J].,014,35(11):1-11. LI H, LI F H, CAO J, et al. Suvey on secuty and pvacy pesevng fo moble ntenet sevce[j]. Jounal on Communcatons, 014, 35(11): [] MAO W. Tmed-elease cyptogaphy[a]. Annual Intenatonal Wokshop on Selected Aeas n Cyptogaphy[C] [3] ZHOU L, VARADHARAJAN V, HITCHENS M. Enfocng ole-based access contol fo secue data stoage n the cloud[j]. Compute Jounal, 011, 54(10): [4] WANG X A, ZHONG W. A new dentty based poxy e-encypton scheme[a]. Intenatonal Confeence on Bomedcal Engneeng and Compute Scence[C] [5] LIANG X, CAO Z, LIN H, et al. Attbute based poxy e-encypton wth delegatng capabltes[a]. Poceedngs of the 4th Intenatonal Symposum on Infomaton, Compute, and Communcatons Secuty[C] [6] SUR C, PARK Y, SHIN S U, et al. Cetfcate-based poxy e-encypton fo publc cloud stoage[a]. Intenatonal Confeence on Innovatve Moble and Intenet Sevces n Ubqutous Computng[C] [7] XU Z, MARTIN K. Dynamc use evocaton and key efeshng fo attbute-based encypton n cloud stoage[a]. Intenatonal Confeence on Tust, Secuty and Pvacy n Computng and Communcatons[C] [8] TANG Q. Type-based poxy e-encypton and ts constucton[a]. Intenatonal Confeence on Cyptology[C] [9],,,. [J]., 01, 39(11): ZHAO J, FENG D G, YANG L, et al. CCA-secue type-based poxy e-encypton wthout pangs[j]. Acta Electonca Snca, 01, 39(11): [10],,,. [J]., 008, 10: LI F H, WANG W, MA J F, et al. Acton-based access contol model and admnstaton of actons[j]. Acta Electonca Snca, 008, 10: [11] WENG J, DENG R H, DING X, et al. Condtonal poxy e-encypton secue aganst chosen-cphetext attack[a]. Poceedngs of the 4th Intenatonal Symposum on Infomaton, Compute, and Communcatons Secuty[C]. New Yok, USA, [1] JIA X, SHAO J, JING J, et al. CCA-secue type-based poxy e-encypton wth nvsble poxy[a]. 010 IEEE 10th Intenatonal Confeence on Compute and Infomaton Technology (CIT)[C]. New Yok, USA, [13] LIU Q, WANG G, WU J. Tme-based poxy e-encypton scheme fo secue data shang n a cloud envonment[j]. Infomaton Scences, 014, 58: E-mal: sm1@163.com ,