Multi-center revocable key strategy attribute-based encryption method and device and storage medium

Abstract

The invention discloses a multi-center revocable key strategy attribute-based encryption method and device, and a storage medium, and the method comprises the steps: each attribute authorization mechanism generating a public and private key pair of the attribute authorization mechanism, and the public and private key pair comprising a public key, a private key and a user key revocation parameter; the encipher inputting a plaintext message, an attribute set corresponding to the plaintext message, a system global parameter and a public key of an attribute authorization mechanism corresponding to the attribute set to obtain a ciphertext message; each attribute authorization mechanism updating a user key revocation parameter in the public and private key pair and obtaining a partial decryption key of the decryptor to form a decryption key of the decryptor; and the decryptor inputting the global ID of the decryptor, the decryption key, the access strategy and the public key and ciphertext message of the attribute authorization mechanism of which the attribute set satisfies the access strategy to obtain a plaintext message. According to the method and the device, interaction between mechanisms is not needed during key management, and participation of other users is not needed, so that the security is improved, and the flexibility is also improved.

Description

technical field

[0001] The invention relates to a multi-center revocable key policy attribute-based encryption method, device and storage medium, belonging to the field of data security. Background technique

[0002] The attribute-based encryption algorithm first appeared in the scheme of Sahai and Waters. In order to improve the fault-tolerant performance of the encryption system based on biological information, they first proposed a scheme based on fuzzy identity encryption in 2005, using biological characteristics directly as identity information in the In identity-based encryption schemes. Sahai introduced the concept of attributes in his paper, and decomposed the user identity into a series of attributes describing the user identity. The encryptor specifies an attribute set and threshold d when encrypting data, and the decryptor must have at least d given attributes to be correct. Decrypt the ciphertext.

[0003] In 2006, Goyal et al. proposed the concept of KP-ABE fo...

Images