CP-ABE method for supporting privacy protection and decryption in cloud

Abstract

The invention belongs to the technical field of cloud storage security and information security, and relates to a CP-ABE method for supporting privacy protection and decryption in cloud. According to the invention, a CP-ABE scheme with functions of user privacy protection, decryption test, decryption outsourcing and message verifiability is realized. According to the method, a flexible LSSS structure construction scheme is used in a prime order group; attributes are divided into attribute names and attribute values, the attribute values containing sensitive information are embedded into a ciphertext, and meanwhile multiple groups of generators and random values are selected to achieve anonymity of data users; a decryption test algorithm and an outsourcing decryption algorithm are added, so that the calculation overhead of a data user is saved, and a large amount of decryption calculation is handed over to a third party; and a message verifiability algorithm ensures the decryption accuracy. According to the scheme of the invention, the decryption efficiency, the ciphertext storage overhead and the access control flexibility are greatly improved on the basis of privacy protection, and the problems of privacy disclosure, high user calculation cost and the like in the prior art are solved.

Description

Technical field [0001] The present invention is in the field of security technology cloud storage and information security, particularly, to a privacy and support cloud decrypted CP-ABE method. Background technique [0002] With the maturing of cloud computing and 5G technologies, cloud-based data storage and sharing platform has become an inevitable trend. However, as a credible cloud platform, to ensure that users upload data can be securely stored and shared, it is necessary to encrypt the data, but the share of traditional encryption obvious drawbacks: First, the traditional need to use third-party data sharing technology ; the owner of the other, the data can not be arbitrarily define access object data, access control is not flexible enough. For example, the number of identity-based encryption (Identity-Based Encryption, IBE), and the only guarantee receiving user data between "one to one" approach, the computational overhead and the length of the ciphertext decryption and ...

AI Technical Summary

Problems solved by technology

[0004] Since Nishide et al. first proposed the CP-ABE scheme of the hidden strategy in 2008, a large number of schemes have been proposed by other researchers. However, if these schemes are used in the actual system, they basically face three problems: ( 1) Low computational efficiency

Due to the large number of pairing operations and exponential operations involved in ABE, the calculation consumption of the user in the decryption phase increases linearly with the number of attributes

(2) The access structure is not flexible

Through our previous research, we found that although many existing solutions claim to protect user privacy, a lightweight DDH test algorithm can expose the access policy or the attributes that constitute the policy, resulting in privacy leakage

Images