WO2018026323A1 - 一种数据处理的方法和装置 - Google Patents
一种数据处理的方法和装置 Download PDFInfo
- Publication number
- WO2018026323A1 WO2018026323A1 PCT/SG2017/050328 SG2017050328W WO2018026323A1 WO 2018026323 A1 WO2018026323 A1 WO 2018026323A1 SG 2017050328 W SG2017050328 W SG 2017050328W WO 2018026323 A1 WO2018026323 A1 WO 2018026323A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- key
- terminal device
- data
- public key
- kgc
- Prior art date
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
- H04L9/0825—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
- H04L63/068—Network architectures or network communication protocols for network security for supporting key management in a packet data network using time-dependent keys, e.g. periodically changing keys
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
- H04L9/083—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
- H04L9/0866—Generation of secret information including derivation or calculation of cryptographic keys or passwords involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0891—Revocation or update of secret information, e.g. encryption key update or rekeying
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/14—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using a plurality of keys or algorithms
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/14—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using a plurality of keys or algorithms
- H04L9/16—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using a plurality of keys or algorithms the keys or algorithms being changed during operation
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
- H04L9/0869—Generation of secret information including derivation or calculation of cryptographic keys or passwords involving random numbers or seeds
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/30—Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
- H04L9/3066—Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy involving algebraic varieties, e.g. elliptic or hyper-elliptic curves
- H04L9/3073—Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy involving algebraic varieties, e.g. elliptic or hyper-elliptic curves involving pairings, e.g. identity based encryption [IBE], bilinear mappings or bilinear pairings, e.g. Weil or Tate pairing
Definitions
- the present invention relates to the field of communications, and in particular, to a method and apparatus for data processing. Background technique
- ABE Attribute-Based Encryption
- use a data processing scheme based on attribute encryption:
- ABE system can have a large amount of data (for the sake of brevity, hereinafter referred to as "use"), due to private key leakage or The reasons for the departure of the wind house need to be correct - some users enter the market.
- Indirect hang-up is a commonly used ABE revoke: Method, Key Generation Center (Key Generation Center) periodically performs the line key update task, so that the revoked user cannot: get the next cycle: The private key cannot be decrypted from the user who was revoked.
- KGC is required to send key information to the user through a secure channel at any time : the user, Li key size is related to the number of users in the system. This puts high demands on the performance of the ABE system and the processing power of the household. Invention capacity
- View: 5 as next embodiment provides a method and apparatus for data processing: by introducing without a trusted server system in a conventional ABE, since such: updated user pin adhesion and the like generated revocation
- the agent can delegate to the server, thereby reducing the amount of user processor outage, enabling the processing: users with limited power can also quickly access attribute encrypted data stored in the cloud or other platforms.
- no secure channel is used.
- the transmission key reduces the performance requirements for the ABE system.
- the embodiment of the present invention provides a data processing method, where the method includes: a terminal device generates a first public key and a first private key, where the first public key is used to encrypt data, and the first private key J is used. Decrypting the data encrypted by the first public in April; the terminal device sends the first public key to the key generation 'ii KGC: the first public key is used for the domain KGC or the service S to generate the conversion key Key, the conversion key is used by the server to convert data encrypted based on an attribute structure of the terminal device into data encrypted based on the first public key, where: the attribute: the structure indicates the access data The condition that needs to be satisfied; the terminal device receives the second number of the server retransmission: the second data is the number generated by the service storm root after the first data is processed: The first data is the data encrypted by the server based on the attribute structure of the terminal device; the terminal device decrypts the second data according to the first private key.
- the terminal device generates a first public key and a first private key, where the first public key is used to encrypt data, and the first private key may decrypt the data encrypted by the first public key by using f.
- the terminal device sends the first public key to the KGC, so that the KGC or the server converts the key according to the first public key i, and the first public key is nested in the conversion key, so when the server uses the conversion
- the generated result is the ciphertext encrypted by the first public key
- the terminal device holds the first private key paired with the transported public key, and the terminal device receives the first private key.
- the first private scam and the decryption algorithm can be used to decrypt the ciphertext. Since the first private key is always held by the terminal device, the first private key does not need to be sent to other devices. Therefore, the method of data processing in the embodiment of the present invention does not need to use security information; The result of processing the first data is still ciphertext, even if the server is combined with its device Other equipment can't get the final plaintext. Therefore, the data processing method of the embodiment of the present invention does not have any requirement for the security performance of the server; again, the first private key of the embodiment of the present invention may be a constant, and the terminal device only performs the decryption operation according to the first private key. A power-finger operation is required to obtain the plaintext, which avoids the bilinear pairing operation that consumes a large amount of computing resources in other technical solutions, thereby reducing the processing capability of the terminal device and improving the resource utilization of the terminal device.
- the sending, by the terminal device, the first public key to the KGC, the method includes: the terminal device sending the first public key and the certification information to the KGC, where the certification information is used to indicate that the terminal device stores The first private key.
- the terminal device may also send the certification information to the KGC when transmitting the first public key to the KGC, and the proof information is used to instruct the terminal device to hold the first private key paired with the first public key, so that the KGC can perform the proof of proof.
- the information determines that the conversion key is generated. If the KGC does not receive the read certification information, the KGC can determine that the first public key is an illegal public key and terminate the subsequent processing of the first public key, thereby improving the security performance of the ABE system.
- the generating, by the terminal device, the first public key and the first private key includes: the terminal device generating the first public key and the first private key according to a system parameter and an identity parameter, where The system parameter is public information generated by the KGC, and the identity parameter is identification information of the terminal device.
- the decrypting, by the terminal device, the second data according to the first private key including: the terminal device decrypting the second according to the system parameter, the identity parameter, and the first private key data.
- an embodiment of the present invention provides a data processing method.
- the method includes: a key generation center KGC receives a first public key from a terminal device, where the first public key is used to encrypt data; Generating, by the first public key and attribute information of the terminal device, a second public key, where the second public key is used by the server to convert data encrypted based on an attribute structure of the terminal device into based on the first public key Encrypted data, so that the terminal device decrypts the data encrypted based on the first public key according to the first private key generated by the terminal device, where the attribute structure is used to indicate a condition that the access data needs to be met
- the KGC sends the second public key to the server.
- the KGC may generate a second public key based on reading the first public key and the property of the terminal device.
- the second public key is a public key based on the attribute of the terminal device, and may be decrypted based on The data encrypted by the attribute of the terminal device, because the second public key is nested with the first public key, the data generated by processing the data encrypted based on the attribute of the terminal device by using the second public key is based on the first public
- the terminal device can decrypt the ciphertext encrypted by the first public key by using the first private key held by the terminal device, where the first private key is a secret paired with the first public key.
- the key can be used to decrypt data encrypted based on the first public key.
- the attribute information of the terminal device may be specific identity information of the terminal device, and the KGC may further generate a second public key according to the first public key and the attribute set of the terminal device.
- the first private key of the embodiment of the present invention may be a constant, and the terminal device only needs to perform a power-finger operation to obtain the plaintext when performing the decryption operation according to the first private key, thereby avoiding consumption of a large amount of computing resources in other technical solutions.
- the bilinear pairing operation reduces the need for the processing capability of the terminal device and improves the resource utilization of the terminal device.
- the method further includes: The KGC generates a conversion key or an error prompt according to the second public key and the key update information, where the key update information is used to indicate a revocation status of the terminal device, where the key update information indicates When the terminal device is revoked, the KGC generates the error prompt according to the second public key and the key update information, and when the key update information indicates that the terminal device is not revoked, The KGC generates the conversion key according to the second public key and the key update information, and the conversion key is used by the server to convert data encrypted based on an attribute of the terminal device into based on the first Public key-encrypted data, so that the terminal device decrypts the result of the conversion key conversion according to the first private key generated by the terminal device; and the KGC sends the second public key to the server, including: Sending, by the KGC, the conversion key to the server; or
- the data processing method of the embodiment of the present invention generates key update information for indicating whether the terminal device is revoked by the KGC, and generates a conversion key or an error result according to the foreclosed key update information and the second public key, thereby ensuring The terminal device that has not been revoked can obtain encrypted data, and the revoked terminal device cannot obtain encrypted data, thereby improving the security performance of the system.
- the method further includes: the KGC receiving the certification information from the terminal device, where the certification information is used to indicate that the terminal device stores the a private key; the KGC determines to generate the second public key based on the certification information.
- the terminal device may also send the certification information to the KGC when transmitting the first public key to the KGC, the certification information is used to instruct the terminal device to hold the first private key paired with the first public key, so that the KGC can The information determines that the second public key is generated. If the KGC does not receive the certification information, the KGC can determine that the first public key is an illegal public key and terminate the subsequent processing of the first public key, thereby improving the security performance of the ABE system.
- the generating, by the KGC, the second public key according to the first public key and the attribute information of the terminal device including: the KGC, according to the first public key, attribute information of the terminal device, and a system
- the second public key and the updated internal state information are generated by the parameter, the master key and the internal state information of the KGC, wherein the system parameter is public information generated by the KGC, the master key Is the private key generated by the KGC.
- the KGC generates the conversion key according to the second public key and the key update information, including: the KGC, according to the second public key, the key update information, The system parameter and the identity parameter generate the conversion key, wherein the key update information indicates that the terminal device is not revoked.
- an embodiment of the present invention provides a data processing method, where the method includes: the server receives a second public key from a key generation center KGC, and the second public key is used to encrypt the attribute structure based on the terminal device. Translating the data into data encrypted based on the first public key generated by the terminal device, so that the terminal device decrypts the data encrypted by the first public key according to the first private key generated by the terminal device, where The attribute structure is used to indicate a condition that the access data needs to be satisfied; the server acquires the first data, the first data is data encrypted based on an attribute structure of the terminal device; the server according to the second public key Converting the first data into second data, the second data is data encrypted based on the first public key; the server sending the second data to the terminal device, so that the terminal device is configured according to the terminal device The first private key decrypts the second data.
- the second public key is a public key generated by the KGC based on the first public key and the attribute information of the terminal device, and the second public key is a public key based on the attribute of the terminal device, and can be decrypted.
- the data encrypted based on the attribute of the terminal device because the second public key is nested with the first public key, the data generated by processing the data encrypted based on the attribute of the terminal device by using the second public key is based on the first Public key encrypted ciphertext, terminal
- the device may decrypt the second data by using the first private key held by the terminal device, where the first private key is a key generated by the terminal device, and may be used to decrypt the data encrypted based on the first public key.
- the first private key of the embodiment of the present invention may be a constant, and the terminal device only needs to perform a power-finger operation to obtain the plaintext when performing the decryption operation according to the first private key, thereby avoiding consumption of a large amount of computing resources in other technical solutions.
- the bilinear pairing operation reduces the need for the processing capability of the terminal device and improves the resource utilization of the terminal device.
- the method further includes: the server receiving key update information from the KGC, where the key update information is used to indicate the terminal device a revocation status; the server generates a conversion key or an error prompt according to the second public key and the key update information, wherein, when the key update information indicates that the terminal device is revoked, the server Generating the error prompt according to the second public key and the key update information, when the key update information indicates that the terminal device is not revoked, the server according to the second public key and the The key update information generates the conversion key, the conversion key being used by the server to convert data encrypted based on an attribute structure of the terminal device into data encrypted based on the first public key, to facilitate the Decrypting, by the terminal device, the first public key encrypted data according to the first private key generated by the terminal device; the server converting the first data according to the second public key Second data, comprising: converting the key server according to the first data into the second data.
- the data processing method of the embodiment of the present invention by receiving the key update information generated by the KGC for indicating whether the terminal device is revoked, and generating a conversion key or an error result according to the read key update information and the second public key, thereby It can be ensured that the terminal device that has not been revoked can obtain encrypted data, and the revoked terminal device cannot obtain the encrypted data, thereby improving the security performance of the system.
- the server generates the conversion key according to the second public key and the key update information, including: the server according to the second public key, the key update information, and system parameters And generating, by the identity parameter, the conversion key, where the system parameter is public information generated by the KGC, and the identity parameter is identifier information of the terminal device.
- the converting, by the server, the first data into the second data according to the conversion key including: the server, according to the conversion key, a system parameter, attribute information of the terminal device, and an identity parameter
- the time parameter converts the first data into the second data, where the system parameter is public information generated by the KGC, the identity parameter is identification information of the terminal device, and the time parameter is used by The time indicating that the server can use the conversion key.
- an embodiment of the present invention provides a device for data processing, where the device can implement the functions performed by the terminal device in the method related to the foregoing aspect, where the function can be implemented by using hardware, or the corresponding software can be executed by hardware.
- the hardware or software includes one or more corresponding units or modules of the above functions.
- the apparatus includes a processor and a communication interface configured to support the apparatus to perform the corresponding functions of the terminal device in the above method.
- the communication interface is used to support communication between the device and other devices.
- the device can also include a memory for coupling to the processor that holds the program instructions and data necessary for the device.
- an embodiment of the present invention provides a device for data processing, where the device can implement the functions performed by the KGC in the method related to the foregoing aspect, where the function can be implemented by using hardware or by executing corresponding software through hardware. .
- the hardware or software includes one or more corresponding units or modules of the above functions.
- the structure of the reading device includes a processor and a communication interface, and the read processor is configured to support the device to perform the corresponding functions of the KGC in the above method.
- the read communication interface is used to support communication between the device and other devices.
- the device can also include a memory, the read memory being coupled to the processor for storing the program instructions and data necessary for the device.
- the embodiment of the present invention provides a device for data processing, where the reading device can implement the functions performed by the server in the method related to the foregoing aspect, and the function can be implemented by using hardware or by executing corresponding software through hardware.
- the hardware or software includes one or more corresponding units or modules of the above functions.
- the structure of the reading device includes a processor and a communication interface, the read processor being configured to support the reading device to perform the corresponding functions of the server in the above method.
- the communication interface is used to support communication between the device and other devices.
- the apparatus can also include a memory for coupling with the processor that retains program instructions and data necessary for the device.
- an embodiment of the present invention provides a device for data processing, where the device includes the foregoing aspect.
- an embodiment of the present invention provides a communication system including the terminal device, the KGC, and the server described in the above aspects.
- an embodiment of the present invention provides a computer storage medium for storing computer software instructions for use in the terminal device, which includes a program designed to perform the above aspects.
- an embodiment of the present invention provides a computer storage medium for storing computer software instructions for use in the KGC, including a program designed to perform the above aspects.
- an embodiment of the present invention provides a computer storage medium for storing computer software instructions for use in the server, including a program designed to perform the above aspects.
- the terminal device does not need to send the key required for the complete decryption of the ciphertext to the other device. Therefore, the data processing method of the embodiment of the present invention does not need to be used.
- the security channel since the result obtained by the server processing the first data is still ciphertext, even if the server collides with other devices, the other device cannot obtain the final plaintext, and therefore, the data processing of the embodiment of the present invention
- the method also has no requirement for the security performance of the server; again, the first private key of the embodiment of the present invention may be a constant, and the terminal device only needs to perform a power-finger operation to obtain the plaintext when performing the decryption operation according to the first private key.
- the bilinear pairing operation that consumes a large amount of computing resources in other technical solutions is avoided, thereby reducing the requirement for the processing capability of the terminal device and improving the resource utilization of the terminal device.
- FIG. 1 is a schematic diagram of a possible system architecture to which an embodiment of the present invention is applied;
- FIG. 2 is a schematic diagram of a KUNodes algorithm to which an embodiment of the present invention is applied; 3 is a schematic diagram of a method for data processing according to an embodiment of the present invention;
- FIG. 4 is a schematic diagram of another method for data processing according to an embodiment of the present invention.
- FIG. 5 is a schematic diagram of still another method for data processing according to an embodiment of the present invention.
- FIG. 6 is a schematic diagram of a binary tree to which an embodiment of the present invention is applied.
- FIG. 7 is a schematic diagram of another binary tree to which an embodiment of the present invention is applied.
- FIG. 8 is a schematic diagram of a possible terminal device according to an embodiment of the present invention.
- FIG. 8B is a schematic diagram of another possible terminal device according to an embodiment of the present invention.
- 9A is a schematic diagram of a possible KGC according to an embodiment of the present invention.
- 9B is a schematic diagram of another possible KGC provided by an embodiment of the present invention.
- FIG. 10A is a schematic diagram of a possible server according to an embodiment of the present invention.
- FIG. 10B is a schematic diagram of another possible server according to an embodiment of the present invention. detailed description
- FIG. 1 is an SR-ABE (Server-Aided Revocable Attribute-Based) according to an embodiment of the present invention.
- SR-ABE Server-Aided Revocable Attribute-Based
- the system architecture includes: a terminal device (ie, a data user) 110, a KGC 120, a server 130, a cloud 140, and a data provider 150.
- a terminal device ie, a data user
- KGC 120 KGC
- server 130 ie, a server
- cloud 140 ie, a cloud
- data provider 150 ie, a data provider
- Step 1 the KGC 120 runs a Setup algorithm during system initialization to generate a system public parameter;
- Step 2 the terminal device 110 runs a UserKG (User Key Generation) algorithm to generate a pair of user public and private key pairs, wherein the user private key can be Decrypting the data encrypted by the user public key, the terminal device 110 saves the user private key, and sends the user public key to the KGC 120;
- UserKG User Key Generation
- Step 3 the KGC 120 generates an attribute-based public key according to the user public key, the system public parameter, the attribute information of the terminal device 110, and the PubKG (public key generation) algorithm, and sends the read attribute-based public key to the server 130;
- Step 4 the KGC 120 periodically performs a TKeyUp (key update) algorithm to generate key update information for the terminal device 110, and sends the forelock key update information to the server 130;
- TKeyUp key update
- Step 5 The data provider 150 runs an Encrypt algorithm to encrypt the data provided according to a certain access structure and time period value, and uploads the encrypted ciphertext to the cloud 140, where
- the fetch structure is an attribute-based access structure
- Step 6 the terminal device 110 obtains the ciphertext from the cloud 140, and forwards the ciphertext to the server 130;
- Step 7 if the key update information indicates that the terminal device 110 is not revoked, the server 130 may generate a conversion key by using a TranKG (transition key generation) algorithm according to the attribute-based public key and the key update information. a conversion key for processing the ciphertext;
- step 8 the server 130 runs a Transform algorithm according to the conversion key, and the slave device 110 The obtained ciphertext is partially decrypted, and the partially decrypted result is sent to the terminal device 110, where the attribute of the terminal device 110 satisfies the requirement of the ciphertext access structure;
- Step 9 The terminal device 110 runs a Decrypt algorithm according to the saved user private key, and completely decrypts the partially decrypted result to generate a plaintext.
- Step 10 If the terminal device 110 needs to be revoked, the KGC 120 may run a Revoke algorithm to generate updated key update information, and the updated key update information indicates that the terminal device 110 has been revoked, so that the server cannot be based on the basis.
- the public key of the attribute of the terminal device 110 generates a conversion key, thereby making it impossible for the terminal device 110 to continue acquiring data.
- the server 130 converts the ciphertext based on the attribute encryption using the conversion key, and generates the generated
- the partially decrypted ciphertext is a ciphertext encrypted based on the user's public key, and the partially decrypted ciphertext can only be decrypted by the user private key held by the terminal 110, so that even the partially decrypted ciphertext is obtained by other devices. Other devices cannot be decrypted, thus ensuring data security.
- the system architecture applicable to the embodiment of the present invention is only an example.
- the embodiment of the present invention can also be applied to other system architectures.
- the KGC 120 and the server 130 shown in FIG. 1 can be used as a hardware device in some scenarios.
- the terminal device 110 can send the indication information to the server 130, and the indication information is used to indicate the ciphertext required by the terminal device 110.
- the server 130 can obtain the corresponding ciphertext from the cloud 140 according to the indication information. .
- FIG. 1 It should also be understood that the number and names of the various devices or modules shown in FIG. 1 are merely illustrative examples, and the application scenarios that do not represent the embodiments of the present invention are limited to the scenario shown in FIG. 1.
- Bilinear Pairing G and G ; are multiplicative groups of two prime numbers, and g is the generator of G.
- a map that can be efficiently computed ⁇ GxG is called a bilinear pairing map if the following conditions are met:
- Non-degenerate g, g) ⁇ 1, which refers to the unit of the unit.
- the forgive algorithm is difficult to distinguish ( , ⁇ ( + ' ) and ( , 2).
- g is a given integer
- g is the generator of group G
- Z EG 1 a, ⁇ , b eZ ⁇ are independent and evenly selected
- the random number, e:GxG ⁇ G 1 is a computable bilinear pairing map.
- a monotonic access structure is a monotonous, family A of a non-empty subset of P, ie A 2 w '' ⁇ ⁇ 0 ⁇ .
- An element in family A is called an authorization set, and a subset of P but not an element of A is called an unauthorized set.
- LSSS Linear Secret Sharing Scheme
- the secret share of each subject in P is a vector on Z p ;
- the Linear Secret Sharing (LSSS) access structure is more general and can be derived from Boolean formula representations. That is, there is a standard way to convert any monotonous Boolean formula into the corresponding linear secret shared share generation matrix M.
- the Boolean formula can be represented as an access control tree, where the internal nodes correspond to the AND gate and the OR gate, and the leaf nodes correspond to the attributes.
- the number of rows corresponding to the LSSS secret and secret share generation matrix M is the number of access control leaf nodes, that is, the total number of attributes.
- BT is a binary with W leaf nodes corresponding to W users.
- root be the root node of the binary tree BT.
- Path representing the set of all nodes from the ⁇ to the root path (including ⁇ and root itself). If it is not a leaf node, use the left and right child nodes respectively and represent the nodes in the tree.
- the unique encoding is a string, and the tree is defined by the representation of its nodes.
- the algorithm KUNodes is used to calculate the minimum set of nodes that need to be updated for the key so that only users whose time period t has not been revoked can decrypt the secret generated during that time period.
- the algorithm takes the binary tree BT, the revocation list r/ and the time period value t as input, and outputs a minimum node set in the BT so that any node in the revocation list r/ does not have any ancestors (including the node itself) in the set. While other nodes (ie all unavided nodes) have one and only one ancestor (including the node itself) are in the set. Note that the revocation list rl for time period t contains all users who have been revoked during that time period.
- the operation of the KUNodes algorithm is given. The algorithm first marks all ancestors of all revoked nodes as revoked nodes, then . These are not the revoked node is revoked child node KUNodes strictly described as follows:
- V (0 ) G rl if t i ⁇ t , then add Path( ⁇ ) to X.
- V ⁇ . ⁇ , ⁇ ⁇ g X , then add x t to 7; if ⁇ ⁇ , then add x r to Y.
- FIG. 3 is a schematic flowchart of a method for data processing according to an embodiment of the present invention. As shown in FIG. 3, the method 300 includes:
- S310 The terminal device generates a first public key and a first private key, where the first public key is used to encrypt data, and the first private key is used to decrypt data encrypted by the first public key.
- the terminal device sends the first public key to a key generation center KGC, where the first public key is used by the KGC or the server to generate a conversion key, and the conversion key is used by the server to be based on
- the data encrypted by the attribute structure of the terminal device is converted into data encrypted based on the first public key, wherein the attribute structure is used to indicate a condition that the access data needs to be satisfied;
- the terminal device receives the second data sent by the server, where the second data is data generated by the server after processing the first data according to the conversion key, where the first data is Decoding data generated by the server based on an attribute structure of the terminal device;
- the terminal device decrypts the second data according to the first private key.
- the terminal device may be a terminal device in the Internet of Things (IoT), or a terminal device or a wireless sensor in a Machine to Machine (M2M) communication system.
- WSN A terminal device in a network, and may also be other types of terminal devices.
- the first public key generated by the terminal device and the first private key appear in pairs.
- the first public key can be used to encrypt data
- the first private key can be used to decrypt the data encrypted by reading the first public key.
- the terminal device sends the first public key to the KGC, so that the KGC or the server generates the conversion key according to the first public key, and the conversion key is based on the attribute of the terminal device (the attribute of the terminal device is based on the attribute of the user of the terminal device, For example, when the user is revoked, the attribute of the terminal device also changes), and the first public key is nested within the conversion key, so when the server uses the conversion key to process the attribute structure based on the terminal device
- the generated result is a partially decrypted ciphertext (ie, the second data) bound to the first public key, and actually the partially decrypted ciphertext is first
- the first private key of the embodiment of the present invention may be a constant, and the terminal device only needs to perform a power-finger operation to obtain the plaintext when performing the decryption operation according to the first private key, thereby avoiding consumption of a large amount of computing resources in other technical solutions.
- the bilinear pairing operation reduces the need for the processing capability of the terminal device and improves the resource utilization of the terminal device.
- the sending, by the terminal device, the first public key to the KGC includes:
- the terminal device sends the first public key and the certification information to the KGC, where the certification information is used to indicate that the terminal device stores the first private key.
- the terminal device may also send the certification information to the KGC when sending the first public key to the KGC, and the certification information is used for Instructing the terminal device to hold the first private key paired with the first public key, so that the KGC can determine to generate the conversion key according to the proof of the proof information, and if the KGC does not receive the certification information, the KGC can determine the first public key. It is an illegal public key and terminates the subsequent processing of the first public key, thereby improving the security performance of the ABE system.
- the terminal device generates a first public key and a first private key, including -,
- the terminal device generates the first public key and the first private key according to the system parameter and the identity parameter, where the system parameter is public information generated by the KGC, and the identity parameter is Identification information of the terminal device.
- the system parameter is the public information generated by KGC, which can be obtained by any device in the system.
- the system parameter can be generated by KGC input security parameter A and executed by ABE's system setting algorithm, (par, msk) ABE.Setup ( l A ) , where par is the system parameter, m is the master key, and ABE. Setup is the system setting algorithm based on attribute encryption.
- the terminal device may produce the terminal device key pair (ie, the first public key and the first private key) according to the system disclosure parameter par, the user identity (ie, the identity parameter), and the ElGamal key generation algorithm: skd, pk id ) ElGamal.
- KeyGen(l A ) where s ( / is the first private key, pk id is the first public key, and ElGamal.KeyGen is the ElGamal key generation algorithm.
- the decrypting, by the terminal device, the second data according to the first private key includes:
- the terminal device decrypts the second data according to the system parameter, the identity parameter, and the first private key, where the system parameter is public information generated by the KGC, and the identity parameter is the terminal device. Identification information.
- the terminal device may output the plaintext (ie, the target data) according to the system parameter par, the user identity id, the first private key sk id , the converted ciphertext (ie, the second data) CT, and the ElGamal decryption algorithm: m' ⁇ - ElGamal. Dec( 3 ⁇ 4 A CT,), where ElGamal.Dec is the ElGamal decryption algorithm and m' is plaintext.
- the terminal device In the data processing method of the embodiment of the present invention, the terminal device generates a public-private key pair, and sends the public key to the KGC, so as to generate a conversion key, and the conversion key is used by the server to encrypt the data based on the attribute of the terminal device. Converting to data encrypted based on the public key, only the terminal device can decrypt the data encrypted based on the public key by using the private key held by itself, thereby eliminating the need to use a secure channel to transmit the private key, and the security performance of the server There is no requirement. In addition, since the private key held by the terminal device can be a constant, the requirement for the processing capability of the terminal device is reduced, and the resource utilization of the terminal device is improved.
- the method 400 includes:
- the key generation center KGC receives a first public key from the terminal device, where the first public key is used to encrypt data;
- the KGC generates a second public key according to the first public key and attribute information of the terminal device, where the second public key is used by the server to convert data encrypted based on an attribute structure of the terminal device into a base The first public key encrypted data, so that the terminal device decrypts the data encrypted based on the first public key according to the first private key generated by the terminal device, where the attribute structure is used for Indicates a condition that the access data needs to be satisfied;
- the KGC sends the second public key to the server. After receiving the first public key sent by the terminal device, the KGC may generate a second public key based on the first public key and the property of the terminal device.
- the second public key is a public key based on the attribute of the terminal device, and may be decrypted based on The data encrypted by the attribute of the terminal device, because the second public key is nested with the first public key, the data generated by processing the data encrypted based on the attribute of the terminal device by using the second public key is based on the first public
- the key encrypted ciphertext the terminal device can decrypt the ciphertext encrypted by the first public key by using the first private key held by the terminal device, where the first private key is a secret paired with the first public key.
- the key can be used to decrypt data encrypted based on the first public key.
- the attribute information of the terminal device may be specific identity (id) information of the terminal device
- the KGC may further generate the second public according to the first public key and the attribute set of the terminal device (that is, the set of multiple attributes) key.
- the first private key of the embodiment of the present invention may be a constant, and the terminal device only needs to perform a power-finger operation to obtain the plaintext when performing the decryption operation according to the first private key, thereby avoiding consumption of a large amount of computing resources in other technical solutions.
- the bilinear pairing operation reduces the need for the processing capability of the terminal device and improves the resource utilization of the terminal device.
- the method further includes:
- the KGC generates a conversion key or an error prompt according to the second public key and the key update information, where the key update information is used to indicate a revocation status of the terminal device, where, when the key is updated
- the KGC generates the error prompt according to the second public key and the key update information, and when the key update information indicates that the terminal device is not revoked,
- the KGC generates the conversion key according to the second public key and the key update information, and the conversion key is used by the server to convert data encrypted based on an attribute of the terminal device into based on the Data encrypted by the first public key, so that the terminal device decrypts the result of the conversion key conversion according to the first private key generated by the terminal device; the KGC sends the second public key to the server,
- the method includes: S422, the KGC sends the conversion key to the server; or
- the KGC sends the second public key and the key update information to the server, so that the server generates the conversion key according to the second public key and the key update information.
- the error message The error message.
- the KGC may generate key update information according to the revocation list indicating that the terminal device has not been revoked, and the key update information is used to indicate that the terminal has not been revoked, and according to the second public key and forgive
- the key update information generates a conversion key
- the read conversion key is still a key based on the attribute of the terminal device
- the first public key is nested
- the KGC sends the conversion key to the server, and the server can use the conversion key to Converting data encrypted based on the attribute of the terminal device into data encrypted based on the first public key, so that the terminal device decrypts the result of the conversion key conversion according to the first private key generated by the terminal device .
- the KGC may also send the second public key and key update information indicating that the terminal device has not been revoked to the server, so that the server generates the conversion key according to the second public key and the key update information.
- the KGC may generate key update information according to the revocation list indicating that the terminal device is revoked, the key update information is used to indicate that the terminal device has been revoked, and the KGC updates the information according to the privilege key. And the second public key generates an error message.
- the KGC may also send the second public key and the key update information indicating that the terminal device is revoked to the server, so that the server generates the error prompt according to the second public key and the read key update information.
- the data processing method of the embodiment of the present invention generates key update information for indicating whether the terminal device is not revoked by the KGC, and generates a conversion key according to the foreclosed key update information and the second public key, thereby ensuring that the key is not
- the revoked terminal device can obtain encrypted data, and the revoked terminal device cannot obtain encrypted data, thereby improving the security performance of the system.
- the method 400 further includes:
- the KGC receives the certification information from the terminal device, where the certification information is used to indicate that the terminal device stores the first private key;
- the KGC determines to generate the second public key according to the certification information.
- the terminal device may also send the certification information to the KGC when transmitting the first public key to the KGC, and the read certification information is used to instruct the terminal device to hold the first private key paired with the first public key, so that the KGC can be based on the proof of proof.
- the information determines that the second public key is generated. If the KGC does not receive the read proof information, the KGC can determine that the first public key is an illegal public key and terminate the subsequent processing of the first public key, thereby improving the security performance of the ABE system.
- the KGC generates the second public key according to the first public key and the attribute information of the terminal device, including:
- the KGC generates the second public key and the updated internal state according to the first public key, attribute information of the terminal device, system parameters, a master key, and internal state information of the KGC.
- Information wherein the system parameter is public information generated by the KGC, and the master key is a private key generated by the KGC.
- the KGC can generate the system parameter par and the master key msk at initialization.
- the terminal device inputs the security parameter meaning and executes the ABE system setting algorithm: (par, msk) ⁇ r ABE. Setup(l) , where ABE Setup sets the algorithm for a system based on attribute encryption.
- the algorithm prepares an initial empty revocation list r/ and status information rf. The final output (p r, msk, rl, sf).
- the second public key may be generated as follows: input system parameter par, master key msk, first public key id id , a set of attributes (ie, including multiple attributes of the terminal device) The set of information) and the internal state st of the KGC, first run the ABE key generation algorithm to obtain the intermediate key sk AJd ABE.KeyGen(m ⁇ ⁇ , id, st) , where ABE.KeyGen is the attribute-based encryption a key generation algorithm, then encrypting the intermediate key with an ElGamal encryption algorithm, and then outputting the attribute key of the terminal device (ie, the second public key): pk id A ElGamal.Enc( 3 ⁇ 4 A sk A d ) , where, ElGamal .Enc is the ElGamal encryption algorithm.
- the ElGamal encryption algorithm can encrypt the entire contents of the intermediate key, improve the security performance, and can only encrypt
- the generating, by the KGC, the conversion key according to the second public key and the first key update information including:
- the KGC generates the conversion key according to the second public key, the first key update information, the system parameter, and the identity parameter, where the key update information indicates the terminal The device has not been revoked.
- KGC can generate the first key update information by: input system parameter /rar, master key msk, time period value t, revocation list rZ and internal state st, forgive algorithm to run ABE key update algorithm, output first Key update information tku t ⁇ r ABE.KeyUpdate(m , rl, t, st) , where ABE.KeyUpdate is a key update algorithm based on attribute encryption, the revocation list rZ includes the terminal device, internal state st Will be changed by the key update algorithm.
- the foregoing embodiment is only an example, and the embodiment of the present invention is not limited thereto. Any algorithm that can generate the second public key, the first key update information, and the conversion key all fall within the protection scope of the present invention.
- the KGC receives the first public key sent by the terminal device, and generates a second public key based on the attribute of the terminal device according to the first public key, so that the attribute based on the terminal device can be encrypted. Converting the data into data encrypted based on the first public key, and only the terminal device can decrypt the data encrypted based on the first public key by using the first private key held by itself, thereby eliminating the need to use a secure channel for transmission.
- the private key has no requirement for the security performance of the server.
- the private key held by the terminal device can be a constant, the requirement for the processing capability of the terminal device is reduced, and the resource utilization of the terminal device is improved.
- FIG. 5 is a schematic flow chart showing a method of data processing according to still another embodiment of the present invention. As shown in FIG. 5, the method 500 includes:
- the server receives a second public key from the key generation center KGC, where the second public key is used to convert data encrypted based on the attribute structure of the terminal device into data encrypted according to the first public key generated by the terminal device.
- the first public key encrypted data is decrypted according to the first private key generated by the terminal device, where the attribute structure is used to indicate a condition that the access data needs to be satisfied;
- the server acquires first data, where the first data is data that is encrypted based on an attribute structure of the terminal device.
- the server converts the first data into second data according to the second public key, where the second data is data encrypted based on the first public key.
- S540 The server sends the second data to the terminal device, so that the terminal device decrypts the second data according to the first private key.
- the second public key is a public key generated by the KGC based on the first public key and the attribute information of the terminal device, and the second public key is a public key based on the attribute of the terminal device, and the attribute encryption based on the terminal device can be decrypted.
- the terminal device may decrypt the second data by using the first private key held by the terminal device, where the first private key is generated by the terminal device
- a key paired with a public key can be used to decrypt data encrypted based on the first public key.
- the second public key may be a public key generated by the KGC based on the first public key and the attribute information of the terminal device, or may be the KGC based on the first public key, the attribute information of the terminal device, and the key update information.
- the generated public key (which may also be referred to as a "transition key"), wherein the key update information is used to indicate that the terminal device has not been revoked.
- the data processing method of the embodiment of the present invention does not need to use a secure channel;
- the result obtained after the processing is still the ciphertext.
- the server colludes with other devices the other devices cannot obtain the final plaintext. Therefore, the data processing method of the embodiment of the present invention does not have any requirement for the security performance of the server;
- the first private key of the embodiment of the present invention may be a constant, and the terminal device only needs to perform a power-finger operation to obtain the plaintext when performing the decryption operation according to the first private key, thereby avoiding consumption of a large amount of computing resources in other technical solutions.
- the bilinear pairing operation reduces the need for the processing capability of the terminal device and improves the resource utilization of the terminal device.
- the method 500 further includes:
- the server receives key update information from the KGC, where the key update information is used to indicate a revocation status of the terminal device.
- the server generates a conversion key or an error prompt according to the second public key and the key update information, where, when the key update information indicates that the terminal device is revoked, the server according to the The second public key and the key update information generate the error prompt, and when the key update information indicates that the terminal device is not revoked, the server is based on the second public key and the key
- the update information generates the conversion key, the conversion key is used by the server to convert data encrypted based on an attribute structure of the terminal device into data encrypted based on the first public key, to facilitate the terminal device Decrypting the data encrypted by the first public key according to the first private key generated by the terminal device;
- Converting, by the server, the first data into the second data according to the second public key including:
- the server converts the first data into the second data according to the conversion key.
- the KGC may generate key update information according to the revocation list indicating that the terminal device has not been revoked, and the key update information is used to indicate that the terminal has not been revoked, and the server may be based on the second public key and
- the key update information generates a conversion key, which is still a key based on the attribute of the terminal device, and is nested with a first public key, and the server can use the conversion key to encrypt the attribute based on the terminal device
- the data is converted into data encrypted based on the first public key, so that the terminal device decrypts the result of the conversion key conversion according to the first private key generated by the terminal device.
- the KGC may generate key update information according to the revocation list indicating that the terminal device is revoked, the key update information is used to indicate that the terminal device has been revoked, and the server may update the information according to the privilege key. And the second public key generates an error message.
- the data processing method of the embodiment of the present invention can ensure that the key update information generated by the KGC is used to indicate that the terminal device has not been revoked, and the conversion key is generated according to the license key update information and the second public key.
- the revoked terminal device can obtain encrypted data, and the revoked terminal device cannot obtain encrypted data, thereby improving the security performance of the system.
- the server generates the conversion key according to the second public key and the key update information, including:
- the server generates the conversion key according to the second public key, the key update information, a system parameter, and an identity parameter, where the system parameter is public information generated by the KGC, and the identity is The parameter is identification information of the terminal device.
- the system parameter is the public information generated by KGC, which can be obtained by any device in the system.
- the system parameter can be generated by KGC input security parameter A and executed by ABE's system setting algorithm, ⁇ par, msk) ABE.Setup ( l A ) , where par is the system parameter, ms/t is the master key, and ABE. Setup is the system setting algorithm based on attribute encryption.
- the server according to the conversion key, converting the first data into the second data
- the method includes: S532, the server, according to the conversion key, system parameters, attribute information of the terminal device, The identity parameter and the time parameter convert the first data into the second data, where the system parameter is public information generated by the KGC, and the identity parameter is identification information of the terminal device, the time Parameters are used to indicate the location
- the conversion key can be used by the terminal device at the current moment.
- the server can convert the first data into the second data by: inputting the system parameter par, the user identity W (ie, the identity parameter), the attribute set conversion key, and the ciphertext CT (ie, the first data), the algorithm runs
- the ABE decryption algorithm outputs an output ciphertext CT ABE.Dec( , ⁇ 1 ⁇ 2 ⁇ ; CT), where ABE.Dec is a decryption algorithm based on attribute encryption, which is a conversion key.
- the server receives the second public key from the KGC, and the read second public key may be a public key generated by the KGC based on the first key update information (ie, a conversion key),
- the key update information is used to indicate that the terminal device is not revoked, and the second public key may be read by the KGC without the public key generated based on the first key update information, and the server may be based on the terminal device according to the second public key.
- the attribute encrypted data is converted into data encrypted based on the first public key, and only the terminal device can decrypt the data encrypted based on the first public key by using the first private key held by itself, thereby eliminating the need to use a secure channel.
- the transmission of the private key does not require the security of the server.
- the private key held by the terminal device can be a constant, the requirement for the processing capability of the terminal device is reduced, and the resource utilization of the terminal device is improved.
- the algorithm randomly selects the group G with the prime order and its generator ge G.
- the reading algorithm randomly selects ", h, u 0 , h 0 , w, VGG, ae Z p .
- r / be the initially empty table to store the revoked user, and BT has at least N leaves The binary tree of the node.
- the algorithm takes as input the system public parameter / 3 ⁇ 4r, the primary private key ms identity / c and its user public key, the user's attribute set and status information.
- ⁇ , ⁇ is the property of the property set.
- the algorithm first selects an undefined node from the binary tree and stores the identity information W at the node. Then, perform the following steps for each node ePath( ):
- the TKeyUp. read algorithm takes the system public parameter par, the master private key msk, a time period value t, the revocation list, and the status information W as inputs. For each node eKUNodes gr, rl, t), get its corresponding. Then random among them,
- the algorithm uses the system public parameter / 3 ⁇ 4r, an identity /c and its user attribute public key p, and the conversion key update information tku t as input.
- Path(6») is / and KUNodes( 7 ⁇ , ⁇ ) is J.
- the read algorithm first resolves pk ⁇ to ⁇ x,
- Tk 2 P x 2 .
- ⁇ is the secret index used to encrypt the message.
- For each 1 to I, calculate v ⁇ Mr ⁇ , where M is the first row of M.
- the output ciphertext CT ((M, p), t, C 0 , C 15 ⁇ C ⁇ , C , C') ⁇ ie[u] , C 5 ). among them
- the algorithm takes as input the system public parameter / 3 ⁇ 4r, identity W and corresponding user conversion key, user attribute set, time period value ⁇ and ciphertext CT with access control structure ( ⁇ , ⁇ ).
- access control structure ⁇ , ⁇
- / ⁇ /: p(i) ⁇ A ⁇ , and ⁇ v ⁇ e Z p ⁇ ieI is a series of constant values so that ⁇ ⁇ is a secret according to ( ⁇ , /7)
- the algorithm will parse the cipher CT
- Revoke Read algorithm with identity value time period value ⁇ , revocation list r/ and status information for input. For all nodes X associated with the identity id, add (X, ⁇ ) to ⁇ and then output the updated revocation list ⁇ .
- the security of SR-ABE can be defined by defining a plaintext attack indistinguishability (IND-CP ⁇ ) security model.
- IND-CP ⁇ plaintext attack indistinguishability
- the attacker can obtain the private key of the data user selected and the public user attribute key. At this point, the attacker should not forgive any part of the information about the encrypted information for the challenged access control structure.
- the security model allows the attacker to access the periodic key update information, and the conversion key information of different time periods can already revoke the user's ability according to the attacker's own needs. At this time, any user who has been revoked if the attribute satisfies the challenged access control structure, if the user is revoked if encrypted, the attacker should not read any part of the information about the encrypted information.
- the revokable ABE scheme with the help of the server proposed by the embodiment of the present invention is provably secure in the standard model under the selective IND-CPA security definition.
- T t We will use a binary tree for time period management.
- Q stores all timestamps at the leaf node (the upper bound is a binary tree.
- the tree ⁇ is shown in Figure 6.
- the first * is replaced by 0; for each child on the right, the first * is replaced by 1.
- the nodes of the entire tree can be named this way.
- Path(ID) We will use a tree (7 for undo management and use identity / Z) to mark leaf nodes. About a set of leaf node functions return a set of (deterministically selected) [/, such that some ancestors of leaf node V are included; 7 (if and only if vf. Such a function exists, and can be The polynomial time (the size and size of ⁇ ) is calculated. Define the string J ⁇ ) from [/ root to leaf v w (including root and leaf) node set to Path (ID
- the representation set S ⁇ ⁇ [ ⁇ : 1 e [r] ⁇ is a time-dependent attribute.
- Output (53 ⁇ 4, 53 ⁇ 4).
- Extension 1 Select the scheme under the ciphertext attack indistinguishable (IND-CCA security).
- IND-CCA security The above SR-ABE scheme proposed by the present invention only satisfies the weak IND-CPA security.
- the IND-CPA secure encryption scheme can be converted to IND-CCA security using several existing universal methods.
- the Fujisaki-Okamoto method proposed in 1999 can promote the attribute-based or identity-based IND-CPA security encryption scheme proposed by the present invention to IND-CCA security.
- decrypting ciphertext (CI, C2).
- the operation of decrypting ciphertext (CI, C 2 ) is as follows: (1) decrypting C1 by ABE to get r; (2) Calculate ABE.Enc(r; G(r)) and compare whether the fortune is equal to Cl, otherwise return an error; (3) If step (2) is successful, use the symmetric key H(r) to decrypt C2 to get the message m. More than ⁇ !.
- the Yamada-Attrapadung-Hanaoka-Kunihiro method proposed in 2001 can also find that the attribute-based IND-CPA security encryption scheme proposed by the present invention is promoted to IND-CCA security.
- decrypting the following operations are performed: (1) one-time signature C2 with vk and C1 face certificate, if no error is returned by returning; (2) If the one-time signature C2 decrypts C1 by using ABE, the message m is obtained.
- Extension 2 Encrypting long data.
- a symmetric key k can be used instead of the message m in the algorithm Encrypt of the attribute encryption scheme proposed in this patent, and then the long data is encrypted by k in a symmetric encryption manner. itself. After the user receives the result of the partial decryption of the server, the user can recover the symmetric key k by using his long-term private key, and then finally decrypt the long data by using the symmetric encryption algorithm used by k.
- the Setup algorithm is the same as in [1], but the parameter a x is not required to be set.
- the Decrypt algorithm with the decryption result ⁇ in [1] is used as the Transform algorithm to be added.
- the data processing method provided by the embodiment of the present invention can be extended to be IND-CCA2 secure, or use symmetric cryptography to support long message encryption, or both IND-CCA2 security and Support for long message encryption.
- Extension 3 can be extended to IND-CCA2 security, or use symmetric cryptography to support long message encryption, or both IND-CCA2 security and long message encryption.
- the method described in Extension 4 can be extended to IND-CCA2 security, or use symmetric cryptography to support long message encryption, or both IND-CCA2 security and long message encryption.
- the PubKG algorithm includes the use of ElGamal to encrypt all or part of the attribute-based key; the Transform algorithm runs the ABE.Dec algorithm to decrypt; the Decrypt algorithm runs the ElGamal.Dec algorithm to decrypt.
- the revokable attribute encryption used in the above general construction shall satisfy the following characteristics:
- each device such as a terminal device, a key generation center, a server, etc.
- each device in order to implement the above functions, includes hardware structures and/or software modules corresponding to the execution of the respective functions.
- the present invention can be implemented in a combination of hardware or hardware and computer software in combination with the elements and algorithm steps of the various examples described in the embodiments disclosed herein. Whether a function is implemented in hardware or computer software to drive hardware depends on the specific application and design constraints of the solution. A person skilled in the art can use different methods for implementing the described functions for each particular application, but such implementation should not be considered to be beyond the scope of the present invention.
- the embodiment of the present invention may divide the functional unit into the terminal device, the key generation center, and the server according to the foregoing method example.
- each functional unit may be divided according to each function, or two or more functions may be integrated into one.
- Processing unit The above integrated unit can be implemented in the form of hardware or in the form of a software functional unit. It should be noted that the division of the unit in the embodiment of the present invention is schematic, and only one logical function is divided, and the actual implementation may have another division manner.
- FIG. 8A shows a possible structural diagram of the terminal device involved in the above embodiment.
- the terminal device 800 includes: a processing unit 802 and a communication unit 803.
- the processing unit 802 is configured to perform control and management on the action of the terminal device 800.
- the processing unit 802 is configured to support the terminal device 800 to perform step 2 and step 9 of FIG. 1.
- the processing unit 802 is further configured to support the terminal device 800 to perform the method. S310 and S340, and/or other processes for the techniques described herein.
- Communication unit 803 is used to support communication between terminal device 800 and other network entities, such as communication with KGC 120 or server 130 shown in FIG.
- the terminal device 800 may further include a storage unit 801 for storing program codes and data of the terminal device 500.
- the processing unit 802 may be a processor or a controller, and may be, for example, a central processing unit (CPU), a general purpose processor, a digital signal processor (DSP), and an application specific integrated circuit (Application-Specific). Integrated Circuit, ASIC), Field Programmable Gate Array (FPGA) or other programmable logic device, transistor logic device, hardware component, or any combination thereof. It is possible to implement or carry out the various illustrative logical blocks, modules and circuits described in connection with the present disclosure.
- the processor may also be a combination of computing functions, for example, including one or more microprocessor combinations, a combination of DSP and processor, and the like.
- the communication unit 803 can be a communication interface, a transceiver, a transceiver circuit, etc., wherein the communication interface is a collective name and can include one or more interfaces.
- the storage unit 801 can be a memory.
- the processing unit 802 is a processor
- the communication unit 803 is a communication interface
- the storage unit 801 is a memory
- the terminal device according to the embodiment of the present invention may be the terminal device shown in FIG. 8B.
- the terminal device 810 includes: a processor 812, a communication interface 813, and a memory 811.
- the terminal device 810 may further include a bus 814.
- the communication interface 813, the processor 812, and the memory 811 may be connected to each other through a bus 814.
- the bus 814 may be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (abbreviated). EISA) bus and so on.
- PCI Peripheral Component Interconnect
- EISA Extended Industry Standard Architecture
- the bus 814 can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only one thick line is shown in Figure 8B, but it does not mean that there is only one bus or one type of bus.
- the terminal device may generate a first public key and a first private key, where the first public key is used to encrypt data, and the first private key may be used to decrypt the data encrypted by the first public key.
- the terminal device sends the first public key to the KGC, so that the KGC or the server generates a conversion key according to the first public key, and the first public key is nested in the conversion key, so when the server uses the conversion key to process
- the generated result is the ciphertext encrypted by the first public key
- the terminal device holds the first private key paired with the first public key, and the terminal device receives the sending by the server.
- the partially decrypted ciphertext After the partially decrypted ciphertext, it can be decrypted according to the first private key and the decryption algorithm to generate plaintext. Since the first private key is always held by the terminal device, the first private key does not need to be sent to other devices. Therefore, the data processing method of the embodiment of the present invention does not need to use a secure channel; The result obtained after the processing is still the ciphertext. Even if the server colludes with other devices, the other devices cannot obtain the final plaintext.
- the data processing method of the embodiment of the present invention does not have any requirement for the security performance of the server;
- the first private key of the embodiment of the present invention may be a constant, and the terminal device only needs to perform a power-finger operation to obtain the plaintext when performing the decryption operation according to the first private key, thereby avoiding consumption of a large amount of computing resources in other technical solutions.
- the bilinear pairing operation reduces the need for the processing capability of the terminal device and improves the resource utilization of the terminal device.
- Fig. 9A shows a possible structural diagram of the KGC involved in the above embodiment.
- the KGC 900 includes a processing unit 902 and a communication unit 903.
- the processing unit 902 is configured to perform control management on the actions of the KGC 900.
- the processing unit 902 is configured to support the KGC 900 to perform Step 1, Step 3, Step 4, and Step 10 of FIG. 1.
- the processing unit 902 may also be used to support the KGC 900 to execute FIG. S420, and/or other processes for the techniques described herein.
- Communication unit 903 is used to support communication of KGC 900 with other network entities, such as communication with terminal device 110 or server 130 shown in FIG.
- the KGC 900 may also include a storage unit 901 for storing program code and data of the KGC 900.
- the processing unit 902 can be a processor or a controller, and can be, for example, a central processing unit CPU, a general purpose processor, a DSP, an ASIC, an FPGA or other programmable logic device, a transistor logic device, a hardware component, or any combination thereof. It is possible to implement or carry out the various illustrative logical blocks, modules and circuits described in connection with the present disclosure.
- the processor may also be a combination of computing functions, for example, including one or more microprocessor combinations, a combination of a DSP and a microprocessor, and the like.
- the communication unit 903 can be a communication interface, a transceiver, a transceiver circuit, etc., wherein the communication interface is a collective name and can include one or more interfaces.
- the storage unit 901 can be a memory.
- the KGC involved in the embodiment of the present invention may be the KGC shown in FIG. 9B.
- the KGC 910 includes: a processor 912, a communication interface 913, and a memory 911.
- the KGC 910 can also include a bus 914.
- the communication interface 913, the processor 912, and the memory 911 may be connected to each other through a bus 914; the bus 914 may be a PCI bus or an EISA bus or the like.
- the bus 914 can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only one thick line is shown in Figure 9B, but it does not mean that there is only one bus or one type of bus.
- the KGC provided by the embodiment of the present invention may generate a second public key based on reading the first public key and reading the attributes of the terminal device, and the second public key is a public key based on the attribute of the terminal device, and the terminal device may be decrypted.
- the data encrypted by the attribute because the second public key is nested with the first public key, the data generated by processing the data encrypted based on the attribute of the terminal device by using the second public key is based on the first public key encryption.
- the ciphertext, the terminal device can decrypt the ciphertext encrypted by the first public key by using the first private key held by the terminal device, where the first private key is a key paired with the first public key, Used to decrypt data encrypted based on the first public key.
- the attribute information of the terminal device may be specific identity information of the terminal device, and the KGC may further generate a second public key according to the first public key and the attribute set of the terminal device.
- the first private key of the embodiment of the present invention may be a constant, and the terminal device only needs to perform a power-finger operation to obtain the plaintext when performing the decryption operation according to the first private key, thereby avoiding consumption of a large amount of computing resources in other technical solutions.
- the bilinear pairing operation reduces the need for the processing capability of the terminal device and improves the resource utilization of the terminal device.
- Fig. 10A shows a possible structural diagram of the server involved in the above embodiment.
- the server 1000 includes: a processing unit 1002 and a communication unit 1003.
- the processing unit 1002 is configured to perform control and management on the action of the server 1000.
- the processing unit 1002 is configured to support the server 1000 to perform step 7 and step 8 of FIG. 1, and the processing unit 1002 is further configured to support the server 1000 to execute S530 of FIG. And/or other processes for the techniques described herein.
- Communication unit 1003 is used to support communication between server 1000 and other network entities, such as communication with terminal device 110 or KGC 120 shown in FIG.
- the server 1000 may further include a storage unit 1001 for storing program codes and data of the server 1000.
- the processing unit 1002 may be a processor or a controller, such as a central processing unit CPU, a general purpose processor, a DSP, an ASIC, an FPGA or other programmable logic device, a transistor logic device, a hardware component, or any combination thereof. It is possible to implement or carry out the various illustrative logical blocks, modules and circuits described in connection with the present disclosure.
- the processor may also be a combination of computing functions, for example, including one or more microprocessor combinations, a combination of a DSP and a microprocessor, and the like.
- the communication unit 1003 may be a communication interface, a transceiver, a transceiver circuit, etc., wherein the communication interface is a collective name and may include one or more interfaces.
- the storage unit 1001 may be a memory.
- the server involved in the embodiment of the present invention may be the server shown in FIG. 10B.
- the server 1010 includes: a processor 1012, a communication interface 1013, and a memory 1011.
- the server 1010 may further include a bus 1014.
- the communication interface 1013, the processor 1012, and the storage can be connected to each other through a bus 1014; the bus 1014 can be a PCI bus or an EISA bus or the like.
- the bus 914 can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only one thick line is shown in FIG. 10B, but it does not mean that there is only one bus or one type of bus.
- the second public key is a public key generated by the KGC based on the first public key and the attribute information of the terminal device
- the second public key is a public key based on the attribute of the terminal device
- the attribute encryption based on the attribute of the terminal device can be decrypted.
- Data because the second public key is nested with the first public key, the data generated by processing the data encrypted based on the attribute of the terminal device by using the second public key is a ciphertext encrypted based on the first public key.
- the terminal device may decrypt the second data by using the first private key held by the terminal device, where the first private key is a key generated by the terminal device, and may be used to decrypt data encrypted based on the first public key.
- the embodiment of the present invention does not need to use the secure channel; further, since the server processes the first data, the result is still The ciphertext, even if the server colludes with other devices, the other devices cannot retrieve the final plaintext. Therefore, the embodiment of the present invention does not have any requirement for the security performance of the server.
- the first private key of the embodiment of the present invention may be Is a constant
- the terminal device only needs to perform a power-finger operation to obtain the plaintext when performing the decryption operation according to the first private key, thereby avoiding the bilinear pairing operation that consumes a large amount of computing resources in other technical solutions, thereby reducing the terminal
- the processing capacity of the device increases the resource utilization of the terminal device.
- sequence number of each process does not mean the order of execution, and the order of execution of each process should be determined by its function and internal logic, and should not be limited to the implementation process of the embodiment of the present invention.
- the steps of the method or algorithm described in connection with the disclosure of the embodiments of the present invention may be implemented in a hardware manner, or may be implemented by a processor executing software instructions.
- the software instructions may be composed of corresponding software modules, which may be stored in a random access memory (RAM), a flash memory, a read only memory (ROM), an erasable programmable read only memory ( Erasable Programmable ROM (EP OM ) , Electrically Erasable Programmable Read Only Memory (EEP OM ) , Registers, Hard Disks, Mobile Hard Disks, CD-ROMs, or any other form of storage medium known in the art in.
- An exemplary storage shield is coupled to the processor such that the processor can read information from, and can write information to, the storage medium.
- the storage interface can also be part of the processor.
- the processor and storage media can be located in an ASIC.
- the ASIC can be located in a terminal device or KGC or server.
- the processor and the storage medium can also exist as discrete components in the terminal device or KGC or server.
- Computer readable media includes computer storage media and communication media, including communication media including any medium that facilitates transfer of a computer program from one location to another.
- a storage medium may be any available media that can be accessed by a general purpose or special purpose computer.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computing Systems (AREA)
- Computer Hardware Design (AREA)
- General Engineering & Computer Science (AREA)
- Storage Device Security (AREA)
- Theoretical Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Mathematical Analysis (AREA)
- Mathematical Optimization (AREA)
- Mathematical Physics (AREA)
- Pure & Applied Mathematics (AREA)
- Algebra (AREA)
Abstract
Description
Claims
Priority Applications (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
EP17837325.4A EP3487118A4 (en) | 2016-08-05 | 2017-06-30 | METHOD AND DEVICE FOR DATA PROCESSING |
JP2019528015A JP2019531673A (ja) | 2016-08-05 | 2017-06-30 | データ処理方法および装置 |
KR1020197006164A KR20190035835A (ko) | 2016-08-05 | 2017-06-30 | 데이터 처리 방법 및 디바이스 |
US16/262,674 US10868670B2 (en) | 2016-08-05 | 2019-01-30 | Data processing method and apparatus |
Applications Claiming Priority (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201610640301.X | 2016-08-05 | ||
CN201610640301.XA CN107689947B (zh) | 2016-08-05 | 2016-08-05 | 一种数据处理的方法和装置 |
PCT/SG2017/050114 WO2018026322A1 (zh) | 2016-08-05 | 2017-03-09 | 一种数据处理的方法和装置 |
SGPCT/SG2017/050114 | 2017-03-09 |
Related Child Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US16/262,674 Continuation US10868670B2 (en) | 2016-08-05 | 2019-01-30 | Data processing method and apparatus |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2018026323A1 true WO2018026323A1 (zh) | 2018-02-08 |
Family
ID=61073109
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/SG2017/050114 WO2018026322A1 (zh) | 2016-08-05 | 2017-03-09 | 一种数据处理的方法和装置 |
PCT/SG2017/050328 WO2018026323A1 (zh) | 2016-08-05 | 2017-06-30 | 一种数据处理的方法和装置 |
Family Applications Before (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/SG2017/050114 WO2018026322A1 (zh) | 2016-08-05 | 2017-03-09 | 一种数据处理的方法和装置 |
Country Status (6)
Country | Link |
---|---|
US (1) | US10868670B2 (zh) |
EP (1) | EP3487118A4 (zh) |
JP (1) | JP2019531673A (zh) |
KR (1) | KR20190035835A (zh) |
CN (1) | CN107689947B (zh) |
WO (2) | WO2018026322A1 (zh) |
Cited By (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN109039609A (zh) * | 2018-08-24 | 2018-12-18 | 深圳美图创新科技有限公司 | 密钥导入终端的方法及终端 |
JP2020053772A (ja) * | 2018-09-25 | 2020-04-02 | 日本電信電話株式会社 | 通信システム、サーバ装置、通信端末、通信方法、及びプログラム |
CN114189339A (zh) * | 2021-12-07 | 2022-03-15 | 贵州亨达集团信息安全技术有限公司 | 一种支持并行密钥隔离的无证书聚合签名方法及系统 |
Families Citing this family (18)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
TWI697807B (zh) * | 2017-12-13 | 2020-07-01 | 台達電子工業股份有限公司 | 具安控機制的傳輸系統及方法 |
CN109660381A (zh) * | 2018-10-25 | 2019-04-19 | 中国平安人寿保险股份有限公司 | 分布式管理方法、装置、服务器及存储介质 |
CN109872787A (zh) * | 2019-02-02 | 2019-06-11 | 上海龙健信息技术科技有限公司 | 一种分布式数据发布与订阅方法 |
CN110400164B (zh) * | 2019-05-13 | 2024-06-14 | 腾讯科技(北京)有限公司 | 数据确定方法和装置、存储介质及电子装置 |
CN110278078B (zh) * | 2019-06-17 | 2022-03-22 | 矩阵元技术(深圳)有限公司 | 一种数据处理方法、装置及系统 |
CN111010276A (zh) * | 2019-10-25 | 2020-04-14 | 武汉大学 | 一种多方联合sm9密钥生成、密文解密方法与介质 |
CN111030801A (zh) * | 2019-10-25 | 2020-04-17 | 武汉大学 | 一种多方分布式的sm9密钥生成、密文解密方法与介质 |
CN111294793A (zh) * | 2019-12-30 | 2020-06-16 | 国网北京市电力公司 | 一种无线传感网中身份认证的数据隐私保护方法 |
CN112104454B (zh) * | 2020-08-11 | 2023-04-07 | 东方红卫星移动通信有限公司 | 一种数据安全传输方法及系统 |
CN112039663B (zh) * | 2020-08-27 | 2023-08-04 | 深圳供电局有限公司 | 一种数据的传输方法及系统 |
CN112418853A (zh) * | 2020-09-22 | 2021-02-26 | 上海哔哩哔哩科技有限公司 | 基于区块链的交易数据加密方法及装置 |
US11799634B2 (en) | 2020-09-30 | 2023-10-24 | Qatar Foundation For Education, Science And Community Development | Mesh network for resource-constrained devices |
CN113515538B (zh) * | 2021-06-08 | 2023-07-07 | 四川新网银行股份有限公司 | 一种基于多方安全计算的机构间隐私数据查询及预警方法 |
CN113489585B (zh) * | 2021-07-02 | 2023-12-05 | 北京明朝万达科技股份有限公司 | 终端设备的身份认证方法、系统、存储介质、电子设备 |
CN113346997B (zh) * | 2021-08-05 | 2021-11-02 | 北京紫光青藤微系统有限公司 | 用于物联网设备通信的方法及装置、物联网设备、服务器 |
KR102629617B1 (ko) * | 2021-12-23 | 2024-01-29 | 재단법인대구경북과학기술원 | 속성 기반 접근 제어를 지원하는 실시간 IoT 데이터 공유 시스템 및 그 방법 |
CN114401426B (zh) * | 2021-12-31 | 2023-05-05 | 珠海迈科智能科技股份有限公司 | 一种动态密钥的生成方法及其系统 |
CN117235682B (zh) * | 2023-11-15 | 2024-05-28 | 张家港金典软件有限公司 | 一种基于智能企业管理平台的企业数据共享方法及系统 |
Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN1918931A (zh) * | 2004-02-11 | 2007-02-21 | 法国电信公司 | 通过移动终端发送公钥 |
US20120300936A1 (en) * | 2011-05-24 | 2012-11-29 | Zeutro, Llc | Outsourcing the Decryption of Functional Encryption Ciphertexts |
CN104022868A (zh) * | 2014-02-18 | 2014-09-03 | 杭州师范大学 | 一种基于密文策略的属性基加密的外包解密方法 |
CN104486315A (zh) * | 2014-12-08 | 2015-04-01 | 北京航空航天大学 | 一种基于内容属性的可撤销密钥外包解密方法 |
Family Cites Families (9)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
FR2748591B1 (fr) * | 1996-05-07 | 1998-06-05 | France Telecom | Procede de realisation d'une transaction electronique securisee a double signature |
EP0856968A3 (en) * | 1997-01-24 | 2000-12-06 | Nec Corporation | Encryption key processing system to be incorporated into data recovery system or key setting system for generating encryption key |
CA2271178A1 (en) | 1999-05-06 | 1999-07-06 | Connotech Experts-Conseils Inc. | Server-side public key cryptography apparatus with private key protection and isolation from public networks |
JP5135070B2 (ja) | 2008-06-12 | 2013-01-30 | 株式会社エヌ・ティ・ティ・データ | 暗号文復号権限委譲システム |
WO2011086668A1 (ja) * | 2010-01-13 | 2011-07-21 | 三菱電機株式会社 | 秘匿検索システム及び公開パラメータ生成装置及び暗号化装置及びユーザ秘密鍵生成装置及びクエリ発行装置及び検索装置及びコンピュータプログラム及び秘匿検索方法及び公開パラメータ生成方法及び暗号化方法及びユーザ秘密鍵生成方法及びクエリ発行方法及び検索方法 |
CN102882685A (zh) * | 2012-09-27 | 2013-01-16 | 东莞宇龙通信科技有限公司 | 身份认证系统及其方法 |
JP6182080B2 (ja) | 2014-01-20 | 2017-08-16 | 日本電信電話株式会社 | 認証システム、プログラム |
US10116442B2 (en) * | 2015-02-20 | 2018-10-30 | Mitsubishi Electric Corporation | Data storage apparatus, data updating system, data processing method, and computer readable medium |
US10498537B2 (en) * | 2016-08-01 | 2019-12-03 | Institute For Development And Research In Banking Technology (Drbt) | System and method for providing secure collaborative software as a service (SaaS) attestation service for authentication in cloud computing |
-
2016
- 2016-08-05 CN CN201610640301.XA patent/CN107689947B/zh active Active
-
2017
- 2017-03-09 WO PCT/SG2017/050114 patent/WO2018026322A1/zh active Application Filing
- 2017-06-30 KR KR1020197006164A patent/KR20190035835A/ko not_active Application Discontinuation
- 2017-06-30 EP EP17837325.4A patent/EP3487118A4/en active Pending
- 2017-06-30 JP JP2019528015A patent/JP2019531673A/ja active Pending
- 2017-06-30 WO PCT/SG2017/050328 patent/WO2018026323A1/zh unknown
-
2019
- 2019-01-30 US US16/262,674 patent/US10868670B2/en active Active
Patent Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN1918931A (zh) * | 2004-02-11 | 2007-02-21 | 法国电信公司 | 通过移动终端发送公钥 |
US20120300936A1 (en) * | 2011-05-24 | 2012-11-29 | Zeutro, Llc | Outsourcing the Decryption of Functional Encryption Ciphertexts |
CN104022868A (zh) * | 2014-02-18 | 2014-09-03 | 杭州师范大学 | 一种基于密文策略的属性基加密的外包解密方法 |
CN104486315A (zh) * | 2014-12-08 | 2015-04-01 | 北京航空航天大学 | 一种基于内容属性的可撤销密钥外包解密方法 |
Non-Patent Citations (3)
Title |
---|
QIN, B. ET AL.: "Attribute-Based Encryption with Efficient Verifiable Outsourced Decryption", IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY, vol. 10, no. 7, 4 March 2015 (2015-03-04), pages 1384 - 1393, XP011581428 * |
QIN, B. ET AL.: "Server-Aided Revocable Identity-Based Encryption, 20th European Symposium on Research in Computer Security", ESORICS, vol. 9326, 25 September 2015 (2015-09-25), Vienna, Australia, pages 286 - 304, XP047412037 * |
See also references of EP3487118A4 * |
Cited By (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN109039609A (zh) * | 2018-08-24 | 2018-12-18 | 深圳美图创新科技有限公司 | 密钥导入终端的方法及终端 |
JP2020053772A (ja) * | 2018-09-25 | 2020-04-02 | 日本電信電話株式会社 | 通信システム、サーバ装置、通信端末、通信方法、及びプログラム |
JP7097581B2 (ja) | 2018-09-25 | 2022-07-08 | 日本電信電話株式会社 | 通信システム、サーバ装置、通信方法、及びプログラム |
CN114189339A (zh) * | 2021-12-07 | 2022-03-15 | 贵州亨达集团信息安全技术有限公司 | 一种支持并行密钥隔离的无证书聚合签名方法及系统 |
CN114189339B (zh) * | 2021-12-07 | 2024-01-26 | 贵州亨达集团信息安全技术有限公司 | 一种支持并行密钥隔离的无证书聚合签名方法及系统 |
Also Published As
Publication number | Publication date |
---|---|
WO2018026322A1 (zh) | 2018-02-08 |
US10868670B2 (en) | 2020-12-15 |
JP2019531673A (ja) | 2019-10-31 |
KR20190035835A (ko) | 2019-04-03 |
EP3487118A1 (en) | 2019-05-22 |
CN107689947B (zh) | 2021-03-30 |
CN107689947A (zh) | 2018-02-13 |
US20190173668A1 (en) | 2019-06-06 |
EP3487118A4 (en) | 2019-07-24 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
WO2018026323A1 (zh) | 一种数据处理的方法和装置 | |
Mahmood et al. | An enhanced anonymous identity‐based key agreement protocol for smart grid advanced metering infrastructure | |
Jirwan et al. | Review and analysis of cryptography techniques | |
US8452974B2 (en) | Image processing apparatus, electronic signature generation system, electronic signature key generation method, image processing method, and program | |
CN110650017B (zh) | 无双线性配对多消息多接收者签密方法、物联网通信系统 | |
CN105024994A (zh) | 无对运算的安全无证书混合签密方法 | |
JP6950745B2 (ja) | 鍵交換装置、鍵交換システム、鍵交換方法、及び鍵交換プログラム | |
CN103973439B (zh) | 一种多变量公钥加密方法 | |
CN110336664B (zh) | 基于sm2密码算法的信息服务实体跨域认证方法 | |
CN112291179B (zh) | 一种实现设备认证的方法、系统及装置 | |
Ullah et al. | A secure NDN framework for Internet of Things enabled healthcare | |
CN110784314A (zh) | 无证书的加密信息处理方法 | |
Niu et al. | A novel user authentication scheme with anonymity for wireless communications | |
WO2021098152A1 (zh) | 基于区块链的数据处理方法、装置及计算机设备 | |
CN113726517A (zh) | 一种信息共享方法及装置 | |
CN101867477B (zh) | 传感器网络会话密钥建立方法 | |
Niu et al. | Lossy data aggregation integrity scheme in wireless sensor networks | |
Ramesh et al. | Secure data storage in cloud: an e-stream cipher-based secure and dynamic updation policy | |
Liu et al. | Secure and efficient two-party collaborative SM9 signature scheme suitable for smart home | |
CN106453253A (zh) | 一种高效的基于身份的匿签密方法 | |
KR101131929B1 (ko) | 공개키 기반 인증장치 및 방법 | |
Somaiya et al. | Implementation and evaluation of EMAES–A hybrid encryption algorithm for sharing multimedia files with more security and speed | |
CN111669275A (zh) | 一种无线网络环境下可选择从节点的主从协作签名方法 | |
CN109842490B (zh) | 数字签名生成/发送/验证方法、终端及计算机存储介质 | |
Duan et al. | Lightweight key management system for inter-node communication in IoT |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 17837325 Country of ref document: EP Kind code of ref document: A1 |
|
ENP | Entry into the national phase |
Ref document number: 2019528015 Country of ref document: JP Kind code of ref document: A |
|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
ENP | Entry into the national phase |
Ref document number: 2017837325 Country of ref document: EP Effective date: 20190212 |
|
ENP | Entry into the national phase |
Ref document number: 20197006164 Country of ref document: KR Kind code of ref document: A |