基于CP-ABE的编队跨域通信方案研究

doi:10.11959/j.issn.1000-436x.2015306

Abstract

Abstract:

Attribute-based encryption (ABE) provides a fine-grained access control mechanism and it can realize one-to-many secure communication.Proxy re-encryption can transform an encrypted data to another kind encrypted between different domains.Aiming at the demand of secure communication of across-domain naval fleet,a scheme that based on CP-ABE was proposed.At last,a security analysis of this scheme and an example of the scheme were proposed.This scheme combining the technology of ABE and proxy re-encryption realizes a secure communication of across-domain naval fleet and one-to-many secure communication among the naval fleet.At the meantime,it meets the needs of meet and access of vessel.

Key words: naval fleet, across-domain communication, meet and access, ABE, proxy re-encryption

Wei GUO,Xue-guang ZHOU,Cheng-qin QU,Fang LUO,Xiang-jun JI. Naval fleet across-domain communication scheme based on CP-ABE[J]. Journal on Communications, 2015, 36(Z1): 250-258.

Figures/Tables 6

References 16

[1]	SHAMIR A . Identity based cryptosystems and signature schemes[A]. Advances in Cryptology-Crypto 1984,Lecture Notes in Computer Science[C]. 1984. 47-53.
[2]	SAHAI A , WATERS B . Fuzzy identity-based encryption[A]. Advances in Cryptology-EUROCRYPT 2005[C]. Berlin,Heidelberg: SpringerVerlag, 2005. 457-473.
[3]	冯登国, 陈成 . 属性密码学研究[J]. 密码学报, 2014,1(1): 1-12. FENG D G , CHEN C . Research on attribute-based cryptography[J]. Journal of Cryptologic Research, 2014,1(1): 1-12.
[4]	MATT B , GERRIT B , MARTIN S . Divertible protocols and atomic proxy cryptography[A]. EUROCRYPT1998[C]. 1998. 127-144.
[5]	TABAN G A A C′ , GLIGOR V D . Towards a secure and interoperable DRM architecture[A]. Proceedings of the 6th ACM Workshop on Digital Rights Management[C]. 2006. 69-78.
[6]	闫玺玺, 马兆丰, 杨义先 , 等. 多域环境下基于代理重加密的电子文档分发协议[J]. 北京邮电大学学报, 2012,35(5): 81-84. YAN X X , MA Z F , YANG Y X , et al. A distribution protocol based on proxy re-encryption in domain environment of E-document management[J]. Journal of Beijing University of Posts and Telecommunications, 2012,35(5): 81-84.
[7]	MATTHEW P , PATRICK T , PATRICK M , BRENT W . Secure attribute-based systems[J]. Journal of Computer Security, 2010,18(5): 799-837.
[8]	YU S C , WANG C , REN K . Attribute based data sharing with attribute revocation[A]. Proc of the ASIAN ACM Conf on Computer and Communications Security (ASIACCS 2010)[C]. New York, 2010. 262-270.
[9]	LIU Q , WANG G J , WU J . Time-based proxy re-encryption scheme for secure data sharing in a cloud environment[J]. Information sciences, 2014,(258): 355-370.
[10]	李强, 冯登国, 张立武 , 等. 标准模型下增强的基于属性的认证密钥协商协议[J]. 计算机学报, 2013,36(10): 2156-2166. LI Q , FENG D G , ZHANG L W , et al. Enhanced attribute-based authenticated key agreement protocol in the standard model[J]. Chinese Journal of Computers, 2013,36(10): 2156-2166.
[11]	余敏达 . 基于属性的加密体制研究与实现[D]. 济南:山东大学, 2013. YU M D . Research and Implementation on Attribute-Based Encryption[D]. Jinan:Shandong University, 2013.
[12]	苏金树, 曹丹, 王小峰 , 等. 属性基加密机制[J]. 软件学报, 2011,22(6): 1299-1315. SU J S , CAO D , WANG X F , et al. Attribute based encryption schemes[J]. Journal of Software, 2011,22(6): 1299-1315.
[13]	宋衍, 韩臻, 刘凤梅 , 等. 基于访问树的策略隐藏属性加密方案[J]. 通信学报, 2015,36(9): 119-126. SONG Y ， HAN Z ， LIU F M , et al. Attribute-based encryption with hidden policies in the access tree[J]. Journal on Communications, 2015,36(9): 119-126.
[14]	SHAMIR A . How to share a secret[J]. Communications of the ACM, 1979,22(11): 612-613.
[15]	周德华 . 代理重加密体制的研究[D]. 上海:上海交通大学, 2013. ZHOU D H . Studies on Proxy Re-Encryption Schemes[D]. Shanghai:Shanghai Jiao Tong University, 2013.
[16]	陈燕利, 杜英杰, 杨庚 . 一种高效的基于属性的认证密钥协商协议[J]. 计算机科学, 2014,41(4): 150-177. CHEN Y L , DU Y J , YANG G . Efficient attribute-based authenticated key agreement protocol[J]. Computer Science, 2014,41(4): 150-154.

Metrics

Recommended 0

No Suggested Reading articles found!

符号	描述	符号	描述
FAC	编队可信授权中心	FPC	编队代理中心
D	域	DM	域管理者
PK	系统公钥	A_u	业务部门属性证书
SK_u	业务部门私钥	k_m	消息加密密钥
A_c	属性集合，密文访问控制策略	C_k	消息加密密钥密文
C_m	消息密文	Dx(y)	用密钥x解密消息y
E_x(y)	用密钥x加密消息y	ID	身份标识
Sig_x(y)	用密钥x对y签名	CER	身份凭证
t	时间戳	X_List	X的列表
Ask_X	X的请求消息	Feedback	反馈信息

方案	通信保密性	访问控制粒度	抗串谋攻击	跨域通信	一对多协同指挥	舰艇随遇接入
传统通信方案	对称加密	粗粒度	——	不支持	不支持	不支持
本文设计方案	对称加密&属性加密	细粒度	支持	支持	支持	支持

方案	代理粒度	加解密关系	加密强度	时间代价（同等密文长度）
本文方案	细粒度	一对多	2层	2T_P+12T_e
文^[15]方案	粗粒度	一对一	2层	3T_P+10T_e

工作方	消耗时间
授权中心	T_p+ nT_e
域管理者	nT_e
代理中心	T_p+nT_e
加密方	(n+1)T_e
解密方	nT_e

Naval fleet across-domain communication scheme based on CP-ABE

RichHTML

PDF

Knowledge

Cited

Abstract

Cite this article

share this article

Figures/Tables 6

References 16

Related Articles 15

Metrics

Recommended 0

[1]	Zhen CHEN, Wenhui CHEN, Xiaowei LIU, Dianlong YOU, Linlin LIU, Limin SHEN. Functional complementarity relationship enhanced cloud API recommendation method [J]. Journal on Communications, 2023, 44(6): 125-137.
[2]	Yuanbo GUO, Yongfei LI, Qingli CHEN, Chen FANG, Yangyang HU. Fusion of Focal Loss’s cyber threat intelligence entity extraction [J]. Journal on Communications, 2022, 43(7): 85-92.
[3]	Zhengyu ZHU, Yu LIN, Zixuan WANG, Kexian GONG, Pengfei CHEN, Zhongyong WANG, Jing LIANG. Fast blind detection of short-wave frequency hopping signal based on MeanShift [J]. Journal on Communications, 2022, 43(6): 200-210.
[4]	Yiteng WU, Wei LIU, Hongtao YU. Label flipping adversarial attack on graph neural network [J]. Journal on Communications, 2021, 42(9): 65-74.
[5]	Zhen ZHANG, Jiaming NI, Ye YAO, Lichun GONG, Yujuan WANG, Guohua WU. Text coverless information hiding method based on synonyms expansion and label delivery mechanism [J]. Journal on Communications, 2021, 42(9): 173-183.
[6]	Jiangtao DONG, Peiwen YAN, Ruizhong DU. Verifiable access control scheme based on unpaired CP-ABE in fog computing [J]. Journal on Communications, 2021, 42(8): 139-150.
[7]	Changgen PENG, Zongfeng PENG, Hongfa DING, Youliang TIAN, Rongfei LIU. Attribute-based revocable collaborative access control scheme [J]. Journal on Communications, 2021, 42(5): 75-86.
[8]	Ruiqi LI, Chunfu JIA, Yafei WANG. Multi-key homomorphic proxy re-encryption scheme based on NTRU and its application [J]. Journal on Communications, 2021, 42(3): 11-22.
[9]	Ruizhong DU, Peiwen YAN, Yan LIU. Fine-grained attribute update and outsourcing computing access control scheme in fog computing [J]. Journal on Communications, 2021, 42(3): 160-170.
[10]	Xiaodong YANG, Wanting XI, Jiaqi WANG, Aijia CHEN, Caifen WANG. Electronic evidence sharing scheme of Internet of vehicles based on signcryption and blockchain [J]. Journal on Communications, 2021, 42(12): 236-246.
[11]	Tianzhu CHEN, Fenghua LI, Yunchuan GUO, Zifu LI. Instance structure based multi-label learning with missing labels [J]. Journal on Communications, 2021, 42(11): 121-132.
[12]	Jiawei ZHANG, Jianfeng MA, Zhuo MA, Teng LI. Time-based and privacy protection revocable and traceable data sharing scheme in cloud computing [J]. Journal on Communications, 2021, 42(10): 81-94.
[13]	Shufen NIU,Wenke LIU,Lixia CHEN,Caifen WANG,Xiaoni DU. Electronic medical record data sharing scheme based on searchable encryption via consortium blockchain [J]. Journal on Communications, 2020, 41(8): 204-214.
[14]	Lifeng CAO,Xin LU,Zhensheng GAO,Xuehui DU. Multi-tenant virtual domain isolation construction method based on L-DHT [J]. Journal on Communications, 2020, 41(6): 184-201.
[15]	Yingying LI,Jianfeng MA,Yinbin MIAO. Encrypted image retrieval in multi-key settings based on edge computing [J]. Journal on Communications, 2020, 41(4): 14-26.