支持用户撤销的属性认证密钥协商协议

doi:10.3969/j.issn.1000-436x.2014.05.005

Abstract

Abstract:

Revocation is a crucial issue for the practical use of attribute-based authenticated key agreement (ABAKA) protocols. A new ABAKA protocol supporting revocation was proposed. The protocol based on Waters' ciphertext-policy attribute-based encryption and Boneh-Gentry-Waters' broadcast encryption was constructed. In the protocol, revocation can be done immediately without affecting any non-revoked users and does not require users to update keys periodically by interacting with the key authority. Compared with the existing ABAKA protocols, the protocol is more efficient in communication complexity. The protocol is provably secure in the standard model and modified ABCK model. The pro-tocol can also provide weak perfect forward secrecy and key compromise impersonation resilience.

Key words: authentication, key agreement, attribute-based, key revocation, standard model

Qiang LI,Deng-guo FENG,Li-wu ZHANG. Attribute-based authenticated key agreement protocol supporting revocation[J]. Journal on Communications, 2014, 35(5): 33-43.

Figures/Tables 1

References 19

[1]	SAHAI A , WATERS B . Fuzzy identity-based encryption[A]. Cryptol-ogy-EUROCRYPT 2005[C]. Berlin: Springer-Verlag 2005.457-473.
[2]	GOYAL V , PANDEY O , SAHAI A , et al. Attribute-based encryption for fine-grained access control of encrypted data[A]. Proceedings of the 13th ACM Conference on Computer and Communications Secu-rity[C]. New York: ACM, 2006.89-98.
[3]	BETHENCOURT J , SAHAI A , WATERS B , et al. Ciphertext-policy attrib-ute-based encryption[A]. Proceedings of the 2007 IEEE Symposium on Security and Privacy[C]. Washington DC, 2007.321-334.
[4]	WATERS B . Ciphertext-policy attribute-based encryption: an expres-sive, efficient, and provably secure realization[A]. PKC 2011[C]. Springer, Heidelberg, 2011.53-70.
[5]	LI J , AU M H , SUSILO W , et al. Attribute-based signature and its applications[A]. ASIACCS 2010[C]. 2010.60-69.
[6]	OKAMOTO T , TAKASHIMA K , et al. Efficient attribute-based signatures for non-monotone predicates in the standard model[A]. PKC 2011[C]. Springer, Heidelberg, 2011.35-52.
[7]	WANG H , XU Q , BAN T . A provably secure two-party attribute-based key agreement protocol[A]. IIH-MSP 2009[C]. Springer, Heidelberg, 2009.1042-1045.
[8]	WANG H , XU Q , FU X . Two-party attribute-based key agreement protocol in the standard model[A]. ISIP 2009[C]. Springer, Heidelberg, 2009.325-328.
[9]	WANG H , XU Q , FU X . Revocable attribute-based key agreement protocol without random oracles[A]. JNW 4[C]. Springer, Heidelberg, 2009.787-794.
[10]	YONEYAMA K . Strongly secure two-pass attribute-based authenti-cated key exchange[A]. Pairing 2010[C]. Springer, Heidelberg, 2010.147-166.
[11]	BIRKETT J , STEBILA D . Predicate-based key exchange[A]. ACISP 2010[C]. Springer, Heidelberg, 2010.282-299.
[12]	YONEYAMA K . Two-party round-optimal session-policy attrib-ute-based authenticated key exchange without random oracles[A]. ICISC 2011[C]. Springer, 2011.467-489.
[13]	BONEH D , CANETTI R , HALEVI S , et al. Chosen-ciphertext secu-rity from identity-based encryption[J]. SIAM J Comput, 2007,36(5):1301-1328.
[14]	苏金树，曹丹，王小峰等．属性基加密机制[J]. 软件学报 2011,22(6): 1299-1315. SU J S , CAO D , WANG X F , et al． Attribute based encryption schemes[J]. Journal of Software, 2011,22(6): 1299-1315.
[15]	ATTRAPADUNG N , IMAI H . Attribute-based encryption supporting direct/indirect revocation modes[A]. Proc of the Cryptography and Coding 2009[C]. Berlin: Springer-Verlag, 2009. 278-300.
[16]	ATTRAPADUNG N , IMAI H . Conjunctive broadcast and attrib-ute-based encryption[A]. Pairing-Based Cryptography-Pairing 2009[C]. Berlin: Springer-Verlag, 2009. 248-265.
[17]	LAI J , DENG R H , LIU S , et al. Efficient CCA-secure PKE from identity-based techniques[A]. CT-RSA 2010, Springer, Heidelberg, 2010. 132-147.
[18]	BEIMEL A . Secure Schemes for Secret Sharing and Key Distribu-tion[D]. Israel Institute of Technology, Technion, 1996.
[19]	BONEH D , GENTRY C , WATERS B . Collusion resistant broadcast encryption with short ciphertexts and private keys[A]. CRYPTO 2005[C]. Springer, Heidelberg, 2005.258-275.

Metrics

Recommended 0

No Suggested Reading articles found!

协议	协议轮数	安全模型	安全性质	用户撤销	通信效率
文献[10]中协议	1	选择安全＆RO模型	wPFS KCI LEK	×	ln+ 1
文献[11]中协议	3	全安全＆标准模型	wPFS	×	7l 12+
文献[12]中协议	1	选择安全＆标准模型	wPFS KCI	×	2l 2+ k+ sig +vk
本文协议	1	选择安全＆标准模型	wPFS,KCI	√	2l 5+

Attribute-based authenticated key agreement protocol supporting revocation

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 1

References 19

Related Articles 15

Metrics

Recommended 0

[1]	Haibo ZHANG, Kai LAN, Zhou CHEN, Ruyan WANG, Can ZOU, Mingyue WANG. Ring-based efficient batch authentication and group key agreement protocol with anonymity in Internet of vehicles [J]. Journal on Communications, 2023, 44(6): 103-116.
[2]	Xuejiao LIU, Qiang ZHONG, Yingjie XIA. Efficient authentication scheme for cross-trust domain of IoV based on double-layer shard blockchain [J]. Journal on Communications, 2023, 44(5): 213-223.
[3]	Tao FENG, Liqiu CHEN, Junli FANG, Jianming SHI. Blockchain data sharing scheme based on localized difference privacy and attribute-based searchable encryption [J]. Journal on Communications, 2023, 44(5): 224-233.
[4]	Yingjie XIA, Siyu ZHU, Xuejiao LIU. Research on efficient cross trust-domain group authentication with conditional privacy of vehicle platoon under blockchian architecture [J]. Journal on Communications, 2023, 44(4): 111-123.
[5]	Xuejiao LIU, Tiancong CAO, Yingjie XIA. Research on efficient and secure cross-domain data sharing of IoV under blockchain architecture [J]. Journal on Communications, 2023, 44(3): 186-197.
[6]	Shengbao WANG, Xin ZHOU, Kang WEN, Bosen WENG. Tripartite authenticated key exchange protocol for smart grid [J]. Journal on Communications, 2023, 44(2): 210-218.
[7]	Yiliang HAN, Kaiyang GUO, Riming WU, Kai LIU. Attribute-based encryption scheme against key abuse based on OBDD access structure from lattice [J]. Journal on Communications, 2023, 44(1): 75-88.
[8]	Youliang TIAN, Maoqing TIAN, Hongfeng GAO, Miao HE, Jinbo XIONG. Cooperation-based location authentication scheme for crowdsensing applications [J]. Journal on Communications, 2022, 43(9): 121-133.
[9]	Xia FENG, Kaiping CUI, Qingqing XIE, Liangmin WANG. Distributed anonymous authentication scheme based on the blockchain in VANET [J]. Journal on Communications, 2022, 43(9): 134-147.
[10]	Zhenyu WANG, Yang GUO, Shaoqing LI, Shen HOU, Ding DENG. Design of efficient anonymous identity authentication protocol for lightweight IoT devices [J]. Journal on Communications, 2022, 43(7): 49-61.
[11]	Ruizhong DU, Tianhe ZHANG, Pengliang SHI. Ciphertext policy hidden access control scheme based on blockchain and supporting data sharing [J]. Journal on Communications, 2022, 43(6): 168-178.
[12]	Xinchun YIN, Mengyu WANG, Jianting NING. Lightweight searchable medical data sharing scheme [J]. Journal on Communications, 2022, 43(5): 110-122.
[13]	Huanhuan LIAN, Huiying HOU, Yunlei ZHAO. Post-quantum verifier-based three-party password authenticated key exchange protocol [J]. Journal on Communications, 2022, 43(4): 95-106.
[14]	Yinghui ZHANG, Lingyun HU, Yixin LI, Jianting NING, Dong ZHENG. Secure and efficient batch authentication scheme based on dynamic revocation mechanism in space information network [J]. Journal on Communications, 2022, 43(4): 164-176.
[15]	Huamin FENG, Rui SHI, Feng YUAN, Yanjun LI, Yang YANG. Efficient strong privacy protection and transferable attribute-based ticket scheme [J]. Journal on Communications, 2022, 43(3): 63-75.