27 results about "Attribute authority" patented technology

The invention discloses an attribute-based encryption method and system based on support of multi-authority accountability and outsourcing calculation, and the method specifically comprises the steps: introducing a multi-attribute authority mechanism to be responsible for key distribution and management, reducing the dependence on a single mechanism, and improving the safety and reliability of the system; the cloud server locally updates the access strategy and the ciphertext according to the minimum change increment set uploaded by the data owner; a white-box tracking technology is adopted to bind a user identity with an attribute key, so that a system can locate a specific identity of a malicious user and a specific identity of a malicious attribute authority through a leaked key; intensive computing tasks in the encryption and decryption processes are outsourced to a cloud server, and meanwhile it is ensured that user privacy is not leaked in the outsourcing process; for the untrusted problem of the cloud server, the calculation result is verified by using the smart contract in the block chain, and it is ensured that the verification process is open and transparent and the result is trusted; and an attribute version mark is introduced, so that efficient revocation of old version attributes is realized, and the safety is further improved.

This invention discloses a blockchain-based verifiable key generation method in MA-CPABE. The method includes: a data owner running a global setting algorithm to generate system parameters, and electing multiple decentralized attribute authorization nodes through a blockchain staking mechanism; each node generating public and private keys and uploading the public key to the blockchain; the data owner encrypting data based on a policy and publishing the ciphertext and its identifier to the blockchain; when a user requests a key, the attribute authorization node calls an optimized key generation circuit to generate a decryption key and a corresponding zero-knowledge proof, submitting the proof and related data to the blockchain, where a verification node verifies and records the key generation event; for the update history of the zero-knowledge proof, a chain-based evidence storage system is constructed through a smart contract event mechanism to achieve verifiable traceability of its change history. This invention achieves decentralized trusted key management, efficient off-chain computation and verifiability, and significantly reduced blockchain resource consumption.

A device includes one or more processors configured to receive, from a user device, an authentication request including credentials of a user. The one or more processors are also configured to obtain user attributes of the user from one or more user data records associated with one or more identity systems. The one or more processors are further configured to obtain one or more roles of the user based on one or more membership lists. The one or more processors are also configured to generate an authentication token indicating the user attributes and the one or more roles.

A kind of attribute classification and grading data security storage and access control method includes a central authority CA, N attribute authorities AAs and X sub-authorities aas, user, agency administrator, product transaction traceability public blockchain, information security supervision alliance blockchain and interstellar file system IPFS.The present application stores massive unstructured data and encrypted information using IPFS, only stores the file addressing hash generated by IPFS on the blockchain, reduces the data storage pressure and security risk of the blockchain;A multi-agency ciphertext policy-based attribute encryption algorithm is constructed to meet the needs of privacy information protection and dynamic fine-grained access control of the system;The combination of multi-authority hierarchical authorization and central authority disperses the system overhead, making it easier to supervise;Accurate tracking of malicious users is achieved, and users and attributes can be revoked immediately without updating keys or ciphertexts.

A method for implementing fine-grained data access sharing in 6G network based on fog computing and cloud computing environment includes: (1) a security parameter is given for initialization; (2) each user is registered as a user with the said attribute authority AA; (3) a corresponding user private key is generated given a set of attributes S of a user; (4) an access policy is given by the owner of the data and data encryption is performed; (5) the user performs the data decryption process according to the embedded policy for the set of owned attributes in different environments; (6) the update key generation process is performed; (7) after receiving the private key update key from the attribute authority AA, the user updates the private key component associated with the revoked attribute in order to complete the private key update process; (8) upon receiving the ciphertext update key from the attribute authority AA, the cloud server updates the ciphertext component associated with the revocation attribute to complete the ciphertext update process.

This invention proposes a method for sharing traditional Chinese medicine (TCM) data based on attribute-based encryption and homomorphic encryption. The method includes an attribute authorization agency, TCM data owners, a blockchain, TCM data users, data user agents, and private key sharers. The attribute authorization agency is responsible for generating the homomorphic encryption public and private keys, attribute public and private keys, and verifying data compliance. The data owner encrypts the data using the homomorphic encryption public key and stores it on the blockchain after setting access policies using attribute-based encryption. When a data user initiates an access request, the data user agent verifies the user's access rights. Upon successful verification, a homomorphic operation is performed on the ciphertext. Subsequently, multiple private key sharers, who collaboratively manage fragments of the homomorphic private key, complete partial decryption. Finally, the TCM data user recovers the plaintext result. This method ensures that TCM data is usable but not visible through homomorphic encryption, achieves precise access control through attribute-based encryption, and reduces the risk of private key escrow through secret sharing.

The invention discloses an attribute-based strategy hiding and puncturing encryption method, which relates to the technical field of data encryption, and is characterized in that a user can autonomously update a secret key of the user, so that the user loses the decryption capability, and does not need to depend on a centralized secret key distribution mechanism. In the scheme, the seamless revocation of the decryption capability can be realized without deleting the key component in the key update. Besides, the scheme utilizes a block chain technology to verify an access policy by integrating an attribute authorization center into a consensus node, so that the calculation overhead is reduced. The invention further discloses an attribute-based strategy hiding and puncturing encryption system, the puncturing function is realized, the encryption scheme has forward security, and a user can actively cancel the key decryption function.

The invention provides an efficient access control method for supporting malicious authorization tracking and preventing collusion on a chain, and belongs to the technical field of information security, the method introduces a block chain to construct a plurality of attribute authorization centers, a central mechanism distributes an attribute set for the plurality of attribute authorization centers, and the attribute authorization centers are responsible for attribute authorization; the central mechanism only needs to manage issuing of attribute authorization authority, specific attribute authorization is completely realized by a plurality of authorization centers, and functions of the central mechanism are decomposed; malicious authorization of the attribute authorization center is tracked, and the malicious authorization center is revoked, so that the scheme authorization is ensured to be credible; in the authorization process of the authorization center, the secret keys mastered by the users are further segmented and randomized, so that part of the secret keys owned by the users are completely irrelevant to attributes, and the difficulty of collusion realization among the users is further increased; and the system calculation overhead is reduced by using outsourcing decryption and proxy re-encryption.

The present application relates to a data encryption method, in particular to a multi-center attribute-based encryption method supporting privacy protection for a smart medical system, a computer readable storage medium and equipment, which is used to solve the defects of single authorization center, insecure sensitive information, key abuse, and inability to guarantee the confidentiality and integrity of data based on attribute-based encryption technology in the smart medical system. The multi-center attribute-based encryption method uses the decentralized characteristics of the block chain, adopts multiple accounting nodes BN θ as a plurality of attribute authorization agencies to distribute keys, effectively avoiding the single point bottleneck problem; at the same time, the consensus node generates an anonymous identity certificate AIC for the data user DU to protect the sensitive information of the data user DU from being leaked. The present application can accurately track and revoke malicious data users DU, and can realize accountability to malicious data users DU and corrupt centers through tracking smart contracts.

The invention discloses a distributed supervision anonymous certificate method and system based on an attribute signature, and the method comprises the steps: a user submits an attribute application to a distributed attribute mechanism, and the attribute mechanism issues an attribute private key to the user through a chain type authorization method after the authentication is passed; the user submits a revocation right application to the supervision mechanism, and the supervision mechanism generates a revocation right for the user and publishes a certificate white list; the user uses the attribute private key and the revoked right to generate an anonymous certificate, and the anonymous certificate is shown to the verifier; the verifier verifies the attribute signature and certificate validity of the anonymous certificate; when a dispute occurs, the verifier can request arbitration, and the supervision mechanism recovers the real identity of the user or revokes the anonymous certificate of the user according to the dispute degree. Compared with the prior art, the anonymous certificate revocation method has the advantages that double decentration of the attribute mechanism and the supervision mechanism is realized, and the anonymous certificate revocation method is efficient.

The invention provides a data sharing encryption method and system supporting anonymity and attribute hiding, and relates to the field of data sharing, and the system comprises a central authority which is used for generating a public parameter based on a security parameter; the attribute authority is used for generating a public key and a private key of the attribute authority based on the public parameters, and anonymizing the data use end; the central authority is also used for distributing corresponding secret values to attributes in the access strategy matrix submitted by the data uploading end; the central authority and the attribute authority are also used for generating an attribute private key of the data use end; the data uploading end is also used for encrypting the plaintext message based on the public parameter and the public key of the attribute authority to generate a ciphertext; the data use end is further used for judging whether the attribute of the data use end meets the access strategy of the ciphertext or not based on the public parameters and the attribute private key of the data use end, and if yes, decrypted data are generated, and the data sharing method and device have the advantage that the flexibility and safety of data sharing are improved.

The application relates to a property access control method supporting multi-domain tracking and user management, and belongs to the field of information security.The method comprises the following steps: a property authorization center generates a unique identity according to user properties, and completes the registration of a new data user; a data owner encrypts plaintext data to obtain intermediate ciphertext; a cloud server performs re-encryption on the intermediate ciphertext; the property authorization center generates a property key and identifies a legal user and a malicious user among the registered new data users based on a conversion key; a proxy server performs initial decryption conversion on the re-encrypted ciphertext; a legal user uses a user private key to complete final decryption, and obtains plaintext data. The method aims to solve the technical problems that the prior art is difficult to realize multi-domain tracking under a multi-domain environment, is difficult to realize user revocation under the premise of considering forward and backward security, and is difficult to realize user addition under the premise of ensuring forward security.

The application discloses a policy hidden access control method and system based on a distributed cuckoo filter, and specifically comprises the following steps: based on system parameters, making each attribute authority generate a respective public-private key pair, and making the public key of the public-private key pair public to all entities; based on the system parameters, the public-private key pair and a user attribute set, generating a corresponding user key component; making a data owner generate a policy fingerprint and an attribute fingerprint according to an access policy, and encrypting a plaintext by using the system parameters, the public-private key pair and the access policy to obtain a ciphertext containing the policy fingerprint; reconstructing the access policy by using a policy row set, and decrypting and verifying the ciphertext in combination with the user key component. The application designs a distributed cuckoo filter to realize a completely hidden policy, and converts the access policy and attributes into fingerprint information tables stored in the DCF, thereby hiding the mapping between the policy and the attributes.

The invention discloses a strategy hidden access control method and system based on a distributed Cuckou filter, and the method specifically comprises the steps: enabling each attribute authorization mechanism to generate a public and private key pair based on system parameters, and enabling a public key of the public and private key pair to be public to all entities; generating a corresponding user key component based on the system parameters, the public and private key pair and the user attribute set; enabling a data owner to generate a strategy fingerprint and an attribute fingerprint according to an access strategy, and encrypting a plaintext by using a system parameter, a public and private key pair and the access strategy to obtain a ciphertext containing the strategy fingerprint; and reconstructing the access policy by using the policy row set, and decrypting and verifying the ciphertext in combination with the user key component. According to the method, a distributed Cuckou filter is designed to realize a completely hidden strategy, and an access strategy and attributes thereof are converted into mapping between the hidden strategy and the attributes in a fingerprint information table stored in a DCF through conversion.

A fine-grained anonymous authentication method for multi-attribute authority system, comprising a central authority, a plurality of attribute authorities, N users and M relying parties in the anonymous authentication system of multi-attribute authority. When the multi-attribute authority system is initialized, the central authority initializes public parameters and secret values; the attribute authority generates secret values for each managed attribute and publishes public parameters, and proves possession of the secret value by means of zero-knowledge proof; when the user joins, the user obtains an empty certificate from the central authority; the user successively looks for the attribute authority to sign the certificate, and finally obtains a certificate signed by multiple attributes; when the user obtains the service provided by the relying party, the user proves to the relying party that the required attribute is possessed, and the anonymous authentication is completed. The application generates secret values for each attribute by the attribute authority and publishes public parameters, solves the problem of user collusion with untrusted attribute authorities to forge attributes, and ensures the normal operation of the anonymous authentication of the multi-attribute authority system.

The invention provides a data processing method and device in federal learning, equipment, a medium and a product, and relates to the technical field of data processing. According to the method, a distributed multi-center attribute authority chain system based on an alliance chain architecture is constructed, and an attribute set and an access control strategy of each participant of federal learning are pre-stored in the system, so that the risk that a single center is easy to face centralized attacks is avoided, and the multi-party trust degree is enhanced. Besides, in the data processing process, the target decryption key is generated after the key acquisition request is verified based on the attribute set and the access control strategy, it is ensured that only the permitted participant can acquire the key, and then the encryption model data is decrypted by using the key to obtain the plaintext model data. And finally executing local model processing operation to generate target model data. Therefore, an encryption protection mechanism based on the attribute set and the access control strategy is provided for model data transmission, the data leakage risk is reduced, and the security and reliability of federated learning joint modeling are improved.

The embodiments of this application relate to the field of industrial data encryption processing technology, and disclose a supply chain data access control method that supports attribute revocation and update. This method is applied to an established supply chain data access control model, which consists of a data accesser, a data owner, an authentication and authorization center, an attribute authorization center, and a cloud service provider. Through global initialization, attribute key generation, data encryption, and data decryption, the data accesser can securely access the data provided by the data owner, achieving efficient and secure data access control. The supply chain data access control model supports complete revocation and update of user attributes. By applying elliptic curve digital signature algorithms, hash algorithms, and asynchronous update strategies, it effectively eliminates single-point performance bottlenecks and leakage problems, achieving efficient complete revocation and update of attributes.

The present application relates to a kind of attribute access control methods of supporting time-limited access, attribute dynamic management and strategy update, belong to information security technical field.The method includes: setting attribute authorization center, cloud server, data owner and data user four entities;Attribute authorization center generates data user key using system public key, master key and the attribute list of data user, then introduces timestamp coding parameter, chameleon hash parameter and attribute list associated random parameter;Data owner encrypts plaintext data, obtains intermediate ciphertext and embeds chameleon hash value, and cloud server re-encrypts intermediate ciphertext, obtains final ciphertext;Data user that meets decryption condition executes decryption operation to final ciphertext using data user key, obtains plaintext data.The purpose is to solve the technical problems that technology cannot support flexible addition, revocation, dynamic adjustment of access strategy and time-limited access control of attribute and key.

The application discloses a kind of bilateral fine-grained access control and privacy protection method based on block chain, applied to privacy protection technical field.The application includes the following steps: system initialization, attribute authorization agency, data owner and data user initiate identity registration request;Authorization center generates verification key and uploads to block chain;Attribute authority calculates encryption key and sends to data owner, calculates decryption key and sends to data user, and data user generates decryption component and uploads to block chain;Data owner encrypts data ciphertext and uploads to interstellar file system, encrypts symmetric key, generates attribute ciphertext component and uploads to block chain;Execute bilateral matching algorithm to verify two-way fine-grained matching mechanism;Matched data user restores symmetric key, obtains and decrypts shared data.The application can realize comprehensive management to access permission, and only when the bilateral access strategy of data user and data owner is satisfied, cross-domain data sharing is realized through block chain.

This invention discloses a medical cloud data sharing method based on blockchain and a privacy-preserving, traceable, and revocable multi-attribute authoritative CP-ABE architecture. The method includes: multi-attribute authoritative institution collaboration, zero-knowledge proof identity authentication, hidden attribute value access strategy, accumulator-encrypted on-chain data storage, and outsourced decryption verification of integrity. This invention achieves privacy protection and secure sharing of cross-institutional medical data.

A decentralized attribute-based encryption method based on a standard model includes: global initialization; an authority generating public and private keys associated with attributes; generating a user's attribute private key; message encryption; and verification of whether the identity and attribute satisfy the access policy. If they satisfy, the plaintext is decrypted and recovered; otherwise, decryption fails. This invention achieves flexible, fine-grained access control by combining LSSS access policies and provides dual security constraints through a global identity and attribute binding mechanism. It is suitable for various practical scenarios of secure data sharing and distributed attribute management, especially for multi-source authorization, privacy protection, and cross-domain collaborative environments. It features high security, high scalability, and good deployment feasibility. This invention requires no central authority or trusted initialization setup; each attribute authority can operate independently and be responsible for the key management and issuance of its own attribute, fundamentally eliminating single-point trust and system bottlenecks.

The invention provides a credible low-altitude perception and data storage platform based on a block chain and an attribute password, which comprises a user interaction layer, a logic processing layer, a block chain and a storage layer. A server side of a flight identity authentication and authority management module, a server side of a flight state perception and anomaly detection module and a server side of an algorithm support module are established on a server of a user, and a user side of the algorithm support module is established on the server of the user and is responsible for locally storing sensitive privacy data such as an asymmetric secret key, a user private key, an attribute private key and an authorized attribute private key of the user. Key pair generation, attribute creation, attribute authorization, data decryption and other operation support related to privacy data are provided, it is ensured that user data are locally stored and used, and no privacy information is exposed to the outside; according to the invention, a low-altitude flight management infrastructure integrating identity management, flight supervision and data security is constructed.

The application discloses an encryption method based on attribute-based strategy hiding and puncturing, relates to the technical field of data encryption, and can enable a user to autonomously update a secret key, so that the user loses decryption capability, thereby not needing to rely on a centralized secret key distribution mechanism.In the scheme, the secret key update does not need to delete secret key components, and seamless revocation of decryption capability can be realized.In addition, the scheme utilizes blockchain technology, verifies an access strategy by integrating an attribute authorization center into a consensus node, and thus reduces a calculation cost.The application also discloses an encryption system based on attribute-based strategy hiding and puncturing, realizes a puncturing function, and is a forward security encryption scheme, so that a user can actively revoke a secret key decryption function.

This invention belongs to, but is not limited to, the field of information security technology, and particularly relates to an efficient data sharing method and system supporting user revocation and key tracking, comprising: system initialization, where an attribute authority generates a master public key and a master private key; attribute key generation, where a data user sends a key request to the authority and receives the corresponding attribute key; data encryption, where the data owner formulates an access policy for their data and encrypts the data accordingly, then uploads the ciphertext to the cloud; update key generation, where the attribute authority generates an update key for its maintained revocation list; decryption key generation, where the data user executes to obtain the decryption key; ciphertext decryption, where users who meet the policy and have not been revoked can decrypt the data; and tracking data encryption and malicious user tracking, where any user can perform tracking encryption to complete malicious user tracking.

The present application relates to the technical field of data security access, in particular to a child health care data storage protection method and system based on federated learning, comprising obtaining a distributed attribute authorization data set, the attribute authorization data set including an attribute definition data set, a policy management data set and a key distribution data set; receiving an authorization instruction through the policy management data set, and generating an access control policy according to the authorization instruction; when a federated learning platform initiates a data access request, creating an isolated cloud computing sandbox environment for a federated learning task according to the access control policy; dynamically calculating and using a differential privacy parameter matched with a use purpose, and applying the parameter to child health care data within the authorized range; executing the federated learning task in the cloud computing sandbox environment, monitoring and limiting data processing operations; providing a permission dynamic adjustment mechanism, when modifying the authorized range and / or revoking the authorization, updating the access control policy to take effect immediately, and pushing a permission change instruction to all computing nodes.

The invention discloses a verifiable multi-authority attribute-based encryption method supporting attribute revocation under a block chain, and the method comprises the steps: enabling a system to initialize a central authorization center CA and an attribute authority AA, submitting attributes, attribute public keys, commitments and the like to a safety storage region of a block chain intelligent contract, and enabling the contract to only read a random number, uploading the attribute, the attribute public key and the commitment to a blockchain smart contract public area; a secret key is generated, and uplink operation of a user private key and a global identifier is realized through an intelligent contract; the smart contract reads the random number from the secure storage area, and verifies the attribute public key and the private key; performing encryption according to the encrypted plaintext, and recording a returned hash address addrCT and an access structure by the block chain; and decrypting the ciphertext and realizing attribute revocation, and updating the public key and promising to realize verification of a new public key and a new private key during revocation. Compared with the prior art, the method can prevent a malicious attribute authority from distributing wrong public keys, and is adaptive to an application scene of independent cooperation of multiple authoritative institutions.

The application discloses a data security access control method based on a block chain. The method comprises the following steps: 1) an attribute authority AA assigns an attribute set S to a data user DU and generates a private key SK, and generates an outsourcing decryption key DSK for a decryption server DSP; 2) a data owner DO uploads a ciphertext SCT obtained by encrypting a plaintext by using a symmetric encryption key to an IPFS, and performs a chain operation on a ciphertext hash value corresponding to the ciphertext SCT returned by the IPFS; and a ciphertext CT is obtained by encrypting the symmetric encryption key; 3) an encryption server ESP performs outsourcing encryption on the ciphertext CT to obtain a ciphertext ECT and perform a chain operation; 4) when the DSP receives an access request of the DU, if the DU satisfies an access control strategy, a partial decryption result DCT is returned; 5) the DU uses the SK to perform secondary decryption on the DCT to obtain the symmetric encryption key; the DU requests the IPFS to obtain the SCT, and then decrypts the returned SCT to obtain the plaintext.