Multi-mechanism attribute-based encryption method supporting strategy dynamic updating

Abstract

The invention discloses a multi-mechanism attribute-based encryption method supporting strategy dynamic updating. The method comprises the seven steps of system initialization, attribute mechanism initialization, secret key generation, data encryption, decryption, dynamic updating secrete key generation and dynamic ciphertext updating. An anonymous secret key distributing protocol is introduced to generate a private key for a user, privacy of the user is effectively protected, and collusion attack of an attribute mechanism is resisted. In addition, a dynamic strategy updating algorithm is adopted, strategy updating of any type is supported, and calculation and communication overhead in traditional strategy updating is greatly reduced. The method is low in communication overhead, supports privacy protection and strategy updating and can be applied to a cloud storage environment.

Description

technical field

[0001] The present invention relates to the field of cloud environment and cryptography, in particular to a multi-organization attribute-based encryption method that supports dynamic update of policies. The method supports dynamic update of data access policies and user privacy protection in cloud environments, and can be used in data outsourcing systems. Data security management, such as personal health record system. Background technique

[0002] With the development of the Internet and the application of cloud computing, more and more people tend to store data in the cloud. However, these data often contain some sensitive information. In order to protect user privacy, sensitive private information needs to be encrypted. . Attribute based encryption (ABE, attribute based encryption), as a new public key encryption technology, binds the user's identity with a series of attributes. By setting the attribute set or access structure for the user's private key o...

Images