基于区块链的噪声化数据分享控制协议

doi:10.11959/j.issn.1000-436x.2023177

摘要/Abstract

摘要：

区块链提供了一种在不可信网络中进行信息分享的可信通道。然而区块链账本是公开透明的，敏感数据直接明文存储在区块链中会泄露用户隐私。考虑到隐私保护，用户更倾向于提供噪声化数据。另外，面对不同的应用场景，用户需要提供的数据噪声化程度也不同。为此，基于区块链和智能合约技术，采用密文策略属性基加密（CP-ABE）算法设计了一套安全、高效且支持安全搜索的噪声化数据分享控制协议。首先，采用可外包的密文策略属性基加密算法，减少用户端的计算负担。其次，利用智能合约来实现密文之上的数据搜索，预防恶意服务器的恶意操作。再次，所提协议能将数据更新复杂度降低至O(1)，对数据实时更新的应用场景友好。最后，安全性分析和仿真实验证明了所提协议的安全性和可行性。

关键词: 区块链, 噪声化数据分享, 访问控制, 可搜索加密

Abstract:

Blockchain provides a trusted channel for information sharing in an untrusted network.However, blockchain ledgers are public and transparent.Hence, the sensitive data stored in plaintext on the blockchain will compromise user privacy.Considering privacy preservation, users are more inclined to provide noisy data.And in different application scenarios, the level of data noise that users need to provide also varies.To this end, a secure, efficient, and searchable noisy data sharing control protocol was proposed based on the blockchain and smart contract technology with the ciphertext policy attribute-based encryption (CP-ABE) algorithm.First, an outsourced CP-ABE algorithm was introduced to reduce the computing burden on the user side.Secondly, smart contract was implemented to perform data search on ciphertext, which could prevent malicious operations by malicious servers.Third, the proposed protocol reduced the data update complexity to O(1), which is friendly to the scenarios with real-time data update.Finally, security analysis and simulation experiments demonstrate the security and feasibility of the proposed protocol.

Key words: blockchain, noisy data sharing, access control, searchable encryption

中图分类号:

TP309

谢晴晴, 杨念民, 冯霞. 基于区块链的噪声化数据分享控制协议[J]. 通信学报, 2023, 44(10): 198-212.

Qingqing XIE, Nianmin YANG, Xia FENG. Blockchain-based noisy data sharing control protocol[J]. Journal on Communications, 2023, 44(10): 198-212.

图/表 10

图1

表1

主要标识符说明"

参数	含义
$PK, MSK, {SK}_{S}$	系统公钥、系统主密钥和搜索密钥
$A^{u}$	用户u的身份属性集合
${ASK}_{u} = 〈 {AK}_{1}, {AK}_{2} 〉$	用户u的属性私钥，是二元组
$Cert ({sk}_{TA}, {pk}_{u})$	TA所签发的用户u证书，其中sk_TA是TA的私钥，pk_u是用户u的公钥
$X . Y$	取X 元组中的Y 分量值
$E_{k} (\cdot)$	对称加密算法，其中k 是对称密钥
$NoiS = {τ_{i}}_{i \in [1, N]}$	噪声集合，其中 $τ_{i} \in G_{T}$
$noi (m, τ_{i})$	噪声化函数，输出对原数据m添加噪声值 $τ_{i}$ 之后的噪声化数据，其中 $τ_{i} \in NoiS$
${T_{i}}_{i \in [1, N]}$	访问策略树集合，其中T_i规定了只有满足该访问策略树的用户才能获得噪声化数据 $noi (m, τ_{i})$
$T_{\forall}$	所有 $T_{i}, i \in [1, N]$ 析取得到的访问策略树，其定义为用户属性集满足T_∀当且仅当其满足任一访问树 $T_{i} \in TS$
${CT}_{m}$	原数据m的密文共享组件
${CT}_{NoiS}$	噪声集合NoiS的密文
$ε_{T_{\forall}} (k)$	会话密钥k 的密文
$KWS = {w_{1}, w_{2}, \cdot \cdot \cdot, w_{v}}$	关键词空间，包含v 个关键词
${Tok}_{w_{i}}$	关键词w_i 搜索令牌

表1

图2

表2

生成的索引"

键	值
${Tok}_{w_{1}}$	${value}_{1} = {{addr}_{m_{1} τ}, {addr}_{m_{2} τ}}$
${Tok}_{w_{2}}$	${value}_{2} = {{addr}_{m_{1} τ}, {addr}_{m_{2} τ}}$
${Tok}_{w_{3}}$	${value}_{3} = {{addr}_{m_{2} τ}}$
${Tok}_{w_{4}}$	${value}_{4} = \emptyset$
⋮	⋮

表2

图3

表3

表4

性能对比"

方案	数据主端的加密计算	数据用户端的解密计算	搜索令牌计算	数据搜索计算	数据更新开销
文献[10]方案	$T_{m} + (\| Y \| + 2) T_{e}$	$S (T_{p} + T_{e}) + 2 T_{m}$	0	n_k	—
文献[11]方案	$\begin{array}{l} 2 T_{p} + (2 \| Y \| + 3) T_{e} + \\ (\| Y \| + 3) T_{m} + (1 + \| Y \|) H + T_{D} \end{array}$	$T_{p} + T_{m} + T_{D}$	$\begin{array}{l} n_{k} [(2 k + 1) T_{e} + \\ k T_{m} + (1 + k) H] \end{array}$	$\begin{array}{l} n_{k} [2 k T_{p} + (2 k + 2) T_{e} + \\ (2 k - 1) T_{m}] \end{array}$	—
文献[27]方案	$\begin{array}{l} (2 n_{z} + 2) T_{m} + (3 n_{z} + 2 n_{z} \| Y \| + \\ 2 \| Y \| + 4) T_{e} + T_{D} + (n_{z} + 1) \| Y \| H \end{array}$	$\begin{array}{l} (4 S + 2) T_{p} + (2 S + 1) T_{m} \\ + 2 S T_{e} + T_{D} \end{array}$	—	—	$3 T_{m} + T_{e} + T_{D}$
本文协议	$(4 n_{z} + 4) T_{m} + (4 n_{z} + 5) T_{e} + T_{D}$	$2 T_{P} + 3 T_{m} + T_{D}$	n _k F	n_k	$3 T_{m} + T_{e} + T_{D}$

表4

图4

图5

图6

参考文献 27

[1]	代闯闯, 栾海晶, 杨雪莹 ,等. 区块链技术研究综述[J]. 计算机科学, 2021,48(S2): 500-508.
	DAI C C , LUAN H J , YANG X Y ,et al. Overview of blockchain technology[J]. Computer Science, 2021,48(S2): 500-508.
[2]	LIU H , YANG B , XIONG X R ,et al. A financial management platform based on the integration of blockchain and supply chain[J]. Sensors, 2023,23(3): 1497.
[3]	王晨旭, 程加成, 桑新欣 ,等. 区块链数据隐私保护:研究现状与展望[J]. 计算机研究与发展, 2021,58(10): 2099-2119.
	WANG C X , CHENG J C , SANG X X ,et al. Data privacy-preserving for blockchain:state of the art and trends[J]. Journal of Computer Research and Development, 2021,58(10): 2099-2119.
[4]	牛淑芬, 刘文科, 陈俐霞 ,等. 基于联盟链的可搜索加密电子病历数据共享方案[J]. 通信学报, 2020,41(8): 204-214.
	NIU S F , LIU W K , CHEN L X ,et al. Electronic medical record data sharing scheme based on searchable encryption via consortium blockchain[J]. Journal on Communications, 2020,41(8): 204-214.
[5]	薛腾飞, 傅群超, 王枞 ,等. 基于区块链的医疗数据共享模型研究[J]. 自动化学报, 2017,43(9): 1555-1562.
	XUE T F , FU Q C , WANG C ,et al. A medical data sharing model via blockchain[J]. Acta Automatica Sinica, 2017,43(9): 1555-1562.
[6]	CHEN Y W , HU B W , YU H J ,et al. A threshold proxy re-encryption scheme for secure IoT data sharing based on blockchain[J]. Electronics, 2021,10(19): 2359.
[7]	SAHAI A , WATERS B . Fuzzy identity-based encryption[C]// Lecture Notes in Computer Science. Berlin:Springer, 2005: 457-473.
[8]	GOYAL V , PANDEY O , SAHAI A ,et al. Attribute-based encryption for fine-grained access control of encrypted data[C]// Proceedings of the 13th ACM conference on Computer and Communications Security. New York:ACM Press, 2006: 89-98.
[9]	BETHENCOURT J , SAHAI A , WATERS B . Ciphertext-policy attribute-based encryption[C]// Proceedings of 2007 IEEE Symposium on Security and Privacy. Piscataway:IEEE Press, 2007: 321-334.
[10]	汪玉江, 曹成堂, 游林 . 基于区块链和属性基加密的个人隐私数据保护方案[J]. 密码学报, 2021,8(1): 14-27.
	WANG Y J , CAO C T , YOU L . A novel personal privacy data protection scheme based on blockchain and attribute-based encryption[J]. Journal of Cryptologic Research, 2021,8(1): 14-27.
[11]	牛淑芬, 杨平平, 谢亚亚 ,等. 区块链上基于云辅助的密文策略属性基数据共享加密方案[J]. 电子与信息学报, 2021,43(7): 1864-1871.
	NIU S F , YANG P P , XIE Y Y ,et al. Cloud-assisted ciphertext policy attribute based encryption data sharing encryption scheme based on blockchain[J]. Journal of Electronics ＆ Information Technology, 2021,43(7): 1864-1871.
[12]	ZHANG Q Y , ZHAO Z Y . Distributed storage scheme for encryption speech data based on blockchain and IPFS[J]. The Journal of Supercomputing, 2023,79(1): 897-923.
[13]	WU N , XU L , ZHU L . A blockchain based access control scheme with hidden policy and attribute[J]. Future Generation Computer Systems, 2023,141: 186-196.
[14]	YIN H J , CHEN E , ZHU Y ,et al. Attribute-based private data sharing with script-driven programmable ciphertext and decentralized key management in blockchain Internet of things[J]. IEEE Internet of Things Journal, 2022,9(13): 10625-10639.
[15]	ZHANG Y , ZHANG L , WU Q ,et al. Blockchain-enabled efficient distributed attribute-based access control framework with privacy-preserving in IoV[J]. Journal of King Saud University - Computer and Information Sciences, 2022,34(10): 9216-9227.
[16]	YU G S , ZHA X , WANG X ,et al. Enabling attribute revocation for fine-grained access control in blockchain-IoT systems[J]. IEEE Transactions on Engineering Management, 2020,67(4): 1213-1230.
[17]	LI F Q , LIU K M , ZHANG L P ,et al. EHRChain:a blockchain-based EHR system using attribute-based and homomorphic cryptosystem[J]. IEEE Transactions on Services Computing, 2022,15(5): 2755-2765.
[18]	LIU J W , WU M L , SUN R ,et al. BMDS:a blockchain-based medical data sharing scheme with attribute-based searchable encryption[C]// Proceedings of IEEE International Conference on Communications. Piscataway:IEEE Press, 2021: 1-6.
[19]	LONG H Q , HOU J , LI Q M ,et al. Data privacy protection of industrial blockchain[C]// International Conference on Cloud Computing. Berlin:Springer, 2021: 83-99.
[20]	HUANG L , LEE H H . A medical data privacy protection scheme based on blockchain and cloud computing[J]. Wireless Communications and Mobile Computing, 2020,2020: 1-11.
[21]	REGUEIRO C , SECO I , DIEGO S D ,et al. Privacy-enhancing distributed protocol for data aggregation based on blockchain and homomorphic encryption[J]. Information Processing ＆ Management, 2021,58(6): 102745.
[22]	GOCHHAYAT S P , BANDARA E , SHETTY S ,et al. Yugala:blockchain based encrypted cloud storage for IoT data[C]// Proceedings of IEEE International Conference on Blockchain (Blockchain). Piscataway:IEEE Press, 2020: 483-489.
[23]	AGYEKUM K O B O , XIA Q , SIFAH E B ,et al. A proxy re-encryption approach to secure data sharing in the Internet of things based on blockchain[J]. IEEE Systems Journal, 2021,16(1): 1685-1696.
[24]	ZHANG L Y , ZHANG Y , WU Q ,et al. A secure and efficient decentralized access control scheme based on blockchain for vehicular social networks[J]. IEEE Internet of Things Journal, 2022,9(18): 17938-17952.
[25]	LIU J , ZHAO J , HUANG H H ,et al. A novel logistics data privacy protection method based on blockchain[J]. Multimedia Tools and Applications, 2022,81(17): 23867-23887.
[26]	ZHANG P , CHEN Z H , LIU J K ,et al. An efficient access control scheme with outsourcing capability and attribute update for fog computing[J]. Future Generation Computer Systems, 2018,78: 753-762.
[27]	XIE Q Q , HOU Y T , CHENG K ,et al. Flexibly and securely shape your data disclosed to others[C]// Proceedings of the 2019 ACM Asia Conference on Computer and Communications Security. New York:ACM Press, 2019: 160-167.

方案	抵抗恶意服务器	细粒度访问控制	密文之上的数据搜索	数据更新	外包加解密
文献[10]方案	√	√	×	×	外包解密
文献[11]方案	√	√	√	×	×
文献[27]方案	×	√	×	√	×
本文协议	√	√	√	√	√