Attribute encryption method and device based on access policy consistency authentication

Abstract

The application discloses an attribute encryption method and device based on access policy consistency authentication, and relates to the field of data security encryption. The method comprises the following steps: a data owner terminal submits an access policy and a time attribute to an attribute authorization server to obtain a randomized attribute label package containing a check token; an unauthenticated ciphertext is generated by combining the label package to encrypt a plaintext, and the ciphertext is sent to a policy authentication server together with the token; the policy authentication server performs consistency verification, issues a certificate after passing the verification, and stores a final authentication ciphertext to a cloud server; the cloud server receives a conversion key generated by a data access terminal based on a local blinding factor, performs matching and reconstruction using the final authentication ciphertext, and returns a blinding conversion result; the data access terminal deblinds and checks the consistency of the result, and decrypts the plaintext after passing the consistency check. The application solves the problems of missing policy consistency verification, easy leakage of privacy, and difficulty in outsourcing decryption verification.

Images