BGN type cryptograph decryption outsourcing scheme based on attributes

A technology of ciphertext and attributes, applied in the field of information security, can solve problems such as illegal reading of ciphertext

Active Publication Date: 2017-09-12
ENG UNIV OF THE CHINESE PEOPLES ARMED POLICE FORCE
View PDF4 Cites 12 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

However, part of the decryption of the ciphertext in this scheme is carried out by the cloud, which requires trust in the outsourced server, and both the ciphertext and the conversion key TK may be illegally read

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • BGN type cryptograph decryption outsourcing scheme based on attributes
  • BGN type cryptograph decryption outsourcing scheme based on attributes
  • BGN type cryptograph decryption outsourcing scheme based on attributes

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0107] 实施例1:基于属性的BGN型密文解密外包方案

[0108] Such as figure 1 所示的基于属性的BGN型密文解密外包方案,其具体步骤如下:

[0109] 步骤(1):设定系统参数,产生加密密钥,主密钥MSK和公钥PK,步骤(1)具体过程如下:

[0110] 步骤(1-1):设定系统参数,输入安全参数λ和属性空间U,其中U={0,1} * ;所输入的安全参数λ的取值比较大,本实施例中,λ选择1024bit大小,足以保证方案的安全性。

[0111] 步骤(1-2):运行算法ξ(λ),得到元组(q 1 ,q 2 ,G,G 1 ,e)和双线性映射e:G×G→G 1 , where q 1 ,q 2 为素数,G,G 1 都是阶为n=q 1 q 2 的群;ξ(λ)是公开的参数产生算法,q 1 ,q 2 为大素数,本实施例中选择q 1 ,q 2 为512bit大小的素数。

[0112] 步骤(1-3):在群G中随机选择生成元k,u,并令 则h是群G的q 1 阶子群生成元,再随机选择阶为p的素数阶群G′和G′ T ,令g为群G′的一个生成元,得到双线性映射e′:G′×G′→G′ T .

[0113] 步骤(1-4):随机选择由{0,1} * 映射到G′的哈希函数F和由G′ T 映射到(0,1)的哈希函数H,随机选择系数α,a∈Z p ,即α、a均在模p的整数域上随机选择,Z p 即为模p的整数域,则算法的主密钥表示为:MSK=(g α ,PK);

[0114] 公钥表示为:PK=(n,g,k,h,e,e′(g,g) α , g a ,F,H,G,G 1 ).

[0115] 步骤(1)中所使用的哈希函数F和哈希函数H均为公开的国产哈希函数SM3算法。

[0116] 步骤(2):发送方选择一个访问结构,对消息进行加密,并生成密文CT,步骤(2)具体过程如下:

[0117] 步骤(2-1):发送方选择LSSS访问结构(M,ρ),其中,M是一个与属性有关的l×n的矩阵,ρ是与M的行元素M i 相关的函数,表示可以将矩阵M的每一行对应到访问结构中某一元素的映射,i=1,2,…,l。

[0118] 步骤(2-2):随机选择n个Z p...

Embodiment 2

[0141] Example 2: Attribute-based BGN-type ciphertext decryption outsourcing scheme

[0142] The specific plan is as follows:

[0143] Step (1): Set system parameters, generate encryption key, master key MSK and public key PK, the specific process of step (1) is as follows:

[0144] Step (1-1): Set system parameters, input security parameter λ and attribute space U, where U={0,1} * ; The value of the input security parameter λ is relatively large. In this embodiment, λ is selected as 1024bit, which is sufficient to ensure the security of the scheme.

[0145] Step (1-2): Run the algorithm ξ(λ) to get the tuple (q 1 ,q 2 ,G,G 1 , e) and bilinear map e:G×G→G 1 , where q 1 ,q 2 is a prime number, G, G 1 Both are of order n=q 1 q 2 group of ; ξ(λ) is a public parameter generation algorithm, q 1 ,q 2 is a large prime number, select q in this embodiment 1 ,q 2 It is a prime number of 512bit size.

[0146] Step (1-3): Randomly select generators k, u in the group G, and ...

Embodiment 3

[0185] Example 3: Attribute-based BGN-type ciphertext decryption outsourcing scheme

[0186] The specific plan is as follows:

[0187] Step (1): Set system parameters, generate encryption key, master key MSK and public key PK, the specific process of step (1) is as follows:

[0188] Step (1-1): Set system parameters, input security parameter λ and attribute space U, where U={0,1} * ; The value of the input security parameter λ is relatively large. In this embodiment, λ is selected as 1024bit, which is sufficient to ensure the security of the scheme.

[0189] Step (1-2): Run the algorithm ξ(λ) to get the tuple (q 1 ,q 2 ,G,G 1 , e) and bilinear map e:G×G→G 1 , where q 1 ,q 2 is a prime number, G, G 1 Both are of order n=q 1 q 2 group of ; ξ(λ) is a public parameter generation algorithm, q 1 ,q 2 is a large prime number, select q in this embodiment 1 ,q 2 It is a prime number of 512bit size.

[0190] Step (1-3): Randomly select generators k, u in the group G, and ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention particularly relates to a BGN type cryptograph decryption outsourcing scheme based on attributes. The scheme comprises steps that (1), a system parameter is set, and an encryption secret key is generated; (2), an access structure is selected by a sending side, message encryption is carried out, and cryptograph is generated; (3), a main secret key and the attributes are inputted by a receiving side, and a conversion secret key and a private secret key are outputted; (4), the cryptograph is sent by the sending side to a cloud end; (5), the conversion secret key is sent to the cloud end by the receiving side; (6), the cryptograph is converted by the cloud end through utilizing the conversion secret key to acquire a part of the cryptograph which is sent to the receiving side; and (7), the private secret key is utilized by the receiving side to decrypt the part of the cryptograph to acquire a message, and homomorphic computation operation for the cryptograph carried out by the cloud end is further comprised between the step (4) and the step (5). The scheme is advantaged in that not only can system decryption efficiency be improved, but also storage cost of a receiver is reduced; according to the cryptograph acquired according to the encryption method, a server is permitted to carry out multiple addition homomorphic operation and multiplication homomorphic operation for cryptograph data, on the condition that decryption difficulty does not increase, CPA safety of the user information is substantially improved.

Description

technical field [0001] The invention belongs to the technical field of information security, and in particular relates to an attribute-based BGN type ciphertext decryption outsourcing scheme. Background technique [0002] The introduction of the concept of cloud computing has brought the development of the information industry into the fast lane. Cloud services not only provide users with massive storage services and powerful computing capabilities, but also promote economic development. Public clouds are mainly maintained and operated by untrustworthy third-party service providers, and security issues associated with cloud computing are also increasing. highlight. Cloud security is considered to be the biggest challenge among many difficulties faced by the practical application of cloud services, and it is also the biggest problem that cloud services need to solve urgently. If the user saves sensitive data to the cloud server in plain text, the cloud may copy or even tamp...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L9/06H04L9/08H04L9/30H04L29/06
CPCH04L9/0643H04L9/0819H04L9/0869H04L9/3073H04L63/0428H04L63/06
Inventor 张薇李镇林杨晓元周潭平张帅伟张敏情韩益亮薛帅
Owner ENG UNIV OF THE CHINESE PEOPLES ARMED POLICE FORCE
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products