基于OBDD访问结构的无配对CP-ABE方案

doi:10.11959/j.issn.1000-436x.2019234

Abstract

Abstract:

To improve the computational efficiency of ABE,its access structure was optimized and a pairing-free CP-ABE scheme based on ordered binary decision diagram (OBDD) was proposed.Based on the elliptic curve cryptography,the complex bilinear pairing operation in traditional CP-ABE was replaced with the relatively lightweight scalar multiplication,thus the overall computation overhead was reduced.And OBDD was used as the access structure of CP-ABE,which can not only represent any Boolean expression about attributes,but also support both positive and negative attributes.The length of the key was independent of the number of attributes and the length of the ciphertext was only related to the number of valid paths in the access policy.The security and performance analysis show that the scheme can resist chosen plaintext attack under the decisional Diffie-Hellman (DDH) assumption,and the computation efficiency can meet the practical application requirements of Internet of things.

Key words: CP-ABE, ordered binary decision diagram, elliptic curve cryptography, pairing-free

CLC Number:

TP393

Sheng DING,Jin CAO,Hui LI. Efficient pairing-free CP-ABE based on ordered binary decision diagram[J]. Journal on Communications, 2019, 40(12): 1-8.

Figures/Tables 5

References 25

[1]	DING S , LI C , LI H . A novel efficient pairing-free CP-ABE based on elliptic curve cryptography for IoT[J]. IEEE Access, 2018(6): 27336-27345.
[2]	WATERS B , . Ciphertext-policy attribute-based encryption:an expressive,efficient,and provably secure realization[C]// International Workshop on Public Key Cryptography. Springer, 2011: 53-70.
[3]	CHEUNG L , NEWPORT C . Provably secure ciphertext policy ABE[C]// The 14th ACM conference on Computer and communications security. ACM, 2007: 456-465.
[4]	BETHENCOURT J , SAHAI A , WATERS B . Ciphertext-policy attribute-based encryption[C]// 2007 IEEE Symposium on Security and Privacy. IEEE, 2007: 321-334.
[5]	JOUX A . A one round protocol for tripartite Diffie-Hellman[J]. Journal of Cryptology, 2004,17(4): 263-276.
[6]	BONEH D , LYNN B , SHACHAM H . Short signatures from the Weil pairing[J]. Journal of Cryptology, 2004,17(4): 297-319.
[7]	BONEH D , FRANKLIN M . Identity-based encryption from the Weil pairing[C]// Annual International Cryptology Conference. Springer, 2001: 213-229.
[8]	ZHOU Z , HUANG D , WANG Z . Efficient privacy-preserving ciphertext-policy attribute based-encryption and broadcast encryption[J]. IEEE Transactions on Computers, 2013,64(1): 126-138.
[9]	WANG S , LIANG K , LIU J K ,et al. Attribute-based data sharing scheme revisited in cloud computing[J]. IEEE Transactions on Information Forensics and Security, 2016,11(8): 1661-1673.
[10]	GUO F , MU Y , SUSILO W ,et al. CP-ABE with constant-size keys for lightweight devices[J]. IEEE Transactions on Information Forensics and Security, 2014,9(5): 763-771.
[11]	LI L , GU T , CHANG L ,et al. A ciphertext-policy attribute-based encryption based on an ordered binary decision diagram[J]. IEEE Access, 2017(5): 1137-1145.
[12]	BEUCHAT J L , GONZáLEZ-DíAZ J E , MITSUNARI S ,et al. High-speed software implementation of the optimal ate pairing over Barreto-Naehrig curves[C]// International Conference on Pairing-Based Cryptography. Springer, 2010: 21-39.
[13]	BARRETO P S L M , GALBRAITH S D , ó’HéIGEARTAIGH C ,et al. Efficient pairing computation on supersingular abelian varieties[J]. Designs,Codes and Cryptography, 2007,42(3): 239-271.
[14]	CANARD S , DEVIGNE J , SANDERS O . Delegating a pairing can be both secure and efficient[C]// International Conference on Applied Cryptography and Network Security. Springer, 2014: 549-565.
[15]	GUILLEVIC A , VERGNAUD D . Algorithms for outsourcing pairing computation[C]// International Conference on Smart Card Research and Advanced Applications. Springer, 2014: 193-211.
[16]	CANARD S , DESMOULINS N , DEVIGNE J ,et al. On the implementation of a pairing-based cryptographic protocol in a constrained device[C]// International Conference on Pairing-Based Cryptography. Springer, 2012: 210-217.
[17]	FREEMAN D , SCOTT M , TESKE E . A taxonomy of pairing-friendly elliptic curves[J]. Journal of Cryptology, 2010,23(2): 224-280.
[18]	SCOTT M , . On the efficient implementation of pairing-based protocols[C]// IMA International Conference on Cryptography and Coding. Springer, 2011: 296-308.
[19]	RIVAIN M . Fast and regular algorithms for scalar multiplication over elliptic curves[J]. IACR Cryptology ePrint Archive, 2011(1):338.
[20]	CHEVALLIER-MAMES B , CORON J S , MCCULLAGH N ,et al. Secure delegation of elliptic-curve pairing[C]// International Conference on Smart Card Research and Advanced Applications. Springer, 2010: 24-35.
[21]	CHEN X , SUSILO W , LI J ,et al. Efficient algorithms for secure outsourcing of bilinear pairings[J]. Theoretical Computer Science, 2015,562: 112-121.
[22]	GREEN M , HOHENBERGER S , WATERS B . Outsourcing the decryption of abe ciphertexts[C]// The 20th USENIX Conference on Security. USENIX Association, 2011.
[23]	LI J , CHEN X , LI J ,et al. Fine-grained access control system based on outsourced attribute-based encryption[C]// European Symposium on Research in Computer Security. Springer, 2013: 592-609.
[24]	ODELU V , DAS A K . Design of a new CP-ABE with constant-size secret keys for lightweight devices using elliptic curve cryptography[J]. Security and Communication Networks, 2016,9(17): 4048-4059.
[25]	ODELU V , DAS A K , KHAN M K ,et al. Expressive CP-ABE scheme for mobile devices in IoT satisfying constant-size keys and ciphertexts[J]. IEEE Access, 2017(5): 3273-3283.

Metrics

Recommended 0

No Suggested Reading articles found!

符号	意义
C_G	群元素的幂乘或标量乘法
C_e	双线性对运算
V	OBDD中有效路径的个数
N	系统中定义的属性个数
S	访问策略中的属性个数
K	密钥生成所用到的属性个数
σ	成功解密所需的最少属性个数
L	群元素大小

运算	计算开销/ms
C_e	3.97
C_G	1.51

方案	密钥生成	加密	解密	密文长度	密钥长度
文献[3]	(2K+1)C_G	(N+1)C_G	O(N)	(N+2)L	(2N+1)L
文献[4]	(2K+2)C_G	(2S+1)C_G	O(σ)	(2S+2)L	(2K+1)L
文献[11]	2C_G	(V+1)C_G	O(1)	(V+2)L	2L
本文方案	—	(V+1)C_G	O(1)	(V+2)L	L

Efficient pairing-free CP-ABE based on ordered binary decision diagram

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 5

References 25

Related Articles 15

Metrics

Recommended 0

[1]	Xia FENG, Kaiping CUI, Qingqing XIE, Liangmin WANG. Distributed anonymous authentication scheme based on the blockchain in VANET [J]. Journal on Communications, 2022, 43(9): 134-147.
[2]	Hui LIU, Xinyan LIU, Yan XU, Hong ZHONG, Meng WANG. Privacy protection of warning message publishing protocol in VANET [J]. Journal on Communications, 2021, 42(8): 120-129.
[3]	Jiangtao DONG, Peiwen YAN, Ruizhong DU. Verifiable access control scheme based on unpaired CP-ABE in fog computing [J]. Journal on Communications, 2021, 42(8): 139-150.
[4]	Changgen PENG, Zongfeng PENG, Hongfa DING, Youliang TIAN, Rongfei LIU. Attribute-based revocable collaborative access control scheme [J]. Journal on Communications, 2021, 42(5): 75-86.
[5]	Ruizhong DU, Peiwen YAN, Yan LIU. Fine-grained attribute update and outsourcing computing access control scheme in fog computing [J]. Journal on Communications, 2021, 42(3): 160-170.
[6]	Jiawei ZHANG, Jianfeng MA, Zhuo MA, Teng LI. Time-based and privacy protection revocable and traceable data sharing scheme in cloud computing [J]. Journal on Communications, 2021, 42(10): 81-94.
[7]	LI Xuejun,ZHANG Dan,LI Hui. Efficient revocable attribute-based encryption scheme [J]. Journal on Communications, 2019, 40(6): 32-39.
[8]	Ruizhong DU,Pengliang SHI,Xinfeng HE. Cloud data assured deletion scheme based on overwrite verification [J]. Journal on Communications, 2019, 40(1): 130-140.
[9]	Yan-lin QIN,Xiao-ping WU,Wei HU. Leakage-resilient certificateless signcryption scheme [J]. Journal on Communications, 2017, 38(Z2): 43-50.
[10]	Cheng SONG,Ming-yue ZHANG,Wei-ping PENG,Zong-pu JIA,Zhi-zhong LIU,Xi-xi YAN. Research on pairing-free certificateless batch anonymous authentication scheme for VANET [J]. Journal on Communications, 2017, 38(11): 35-43.
[11]	Zhi-tao GUAN,Ting-ting YANG,Ru-zhi XU,Zhu-xiao WANG. Multi-authority attribute-based encryption access control model for cloud storage [J]. Journal on Communications, 2015, 36(6): 116-126.
[12]	Guo-zi SUN,Yu DONG,Yun LI. CP-ABE based data access control for cloud storage [J]. Journal on Communications, 2011, 32(7): 146-152.
[13]	Xiao-hui YANG,Zi-bin DAI,Miao LI,Yong-fu ZHANG. Research and design of parallel architecture processor for elliptic curve cryptography [J]. Journal on Communications, 2011, 32(5): 70-77.
[14]	Hong-hu ZHEN,Yue CHEN,Peng-xu TAN,Yuan-bo GUO. Asymmetric bilinear pairing based direct anonymous attestation scheme [J]. Journal on Communications, 2010, 31(8A): 37-43.
[15]	Zhong LI,Yi WANG,Dai-yuan PENG. Sliding window multiplication in finite field GF(2ⁿ) [J]. Journal on Communications, 2008, 29(7): 27-31.