A keyless escrow multi-authorization attribute-based encryption method and system

Abstract

The invention discloses a multi-authorization attribute-based encryption method and system without key escrow. The system includes a user identity manager IDM, an attribute authorization center AAs, a data owner DO, a data user DU, a cloud storage server CSS, and a data user DU. Submit its legal identity information and commitment value to IDM; after IDM successfully detects the identity of the DU, IDM generates and returns the corresponding certificate containing the DU commitment value; when the DU applies for the decryption key to the AAs, the DU also submits the corresponding commitment value; after the AAs successfully verify the signature in the certificate, the AAs calculate the corresponding private key for the DU respectively; the data owner DO encrypts the data and uploads it to the cloud storage server CSS, and the DU downloads the corresponding ciphertext from CSS and uses its private key. key to decrypt. The invention not only overcomes the key escrow problem by adding embedded user secret value, embedded legality authentication role private key value, etc., but also realizes the anti-AAs collusion attack and anti malicious user collusion attack problems.

Description

technical field [0001] The invention relates to the technical field of cloud computing security, in particular to a multi-authorization attribute-based encryption method and system without key escrow. Background technique [0002] An important application of cloud computing services is data storage. The data owner uploads data to the cloud for some special users. To use that data, these users must first gain access to the data. Data owners and data consumers do not interact directly. In order to protect the data confidentiality of data owners, many data encryption and data access control methods are employed to prevent data resources from being used by unauthorized users. In a complex cloud computing environment, cloud servers are often operated by commercial organizations, which may provide data access rights for unauthorized users for some benefit. Therefore, data owners cannot fully trust cloud servers to provide secure data access management based on the fact that tho...

AI Technical Summary

Problems solved by technology

Therefore, based on those servers may not be able to obtain an effective security mechanism, data owners cannot fully trust cloud servers to provide secure data access management

In attribute-based encryption (ABE) applications, the attribute authorization center AAs can generate the decryption key of all users, and can decrypt the ciphertext of all users without user participation, that is, there is a key escrow problem

Images