FDR-ABE: Attribute-Based Encryption with Flexible and Direct Revocation
FDR-ABE: Attribute-Based Encryption with Flexible and Direct Revocation
复制标题
DOI：
10.1109/incos.2013.16
复制
发表时间：
2013-09
期刊：
影响因子：
--
通讯作者：
Yinghui Zhang;Xiaofeng Chen;Jin Li;Hui Li;Fenghua Li
中科院分区：
文献类型：
--
作者：
Yinghui Zhang;Xiaofeng Chen;Jin Li;Hui Li;Fenghua Li
在基于属性的加密（ABE）系统中，撤销问题是重要且困难的，因为用户在实践中可能会频繁地改变他们的属性，并且每个属性可能被多个用户共享。据我们所知，现有的ABE方案由于属性密钥和密文更新繁琐，均无法支持灵活直接的撤销。针对上述挑战，本文形式化了灵活直接撤销的密文策略ABE（FDR-CP-ABE）的概念，并给出了支持直接属性和用户撤销并适用于数据共享架构的具体构造。所提出的 FDR-CP-ABE 方案优于以前的撤销相关方法，因为它具有恒定大小的密文，并且每当发生撤销事件时仅需要更新部分密文。此外，我们表明我们的 FDR-CP-ABE 方案在标准模型中可证明是安全的，并且它不能通过 CP-ABE 和 BE 技术的简单组合来实现。
In attribute-based encryption (ABE) systems, the revocation issue is essential and difficult, since users may change their attributes frequently in practice and each attribute is conceivably shared by multiple users. To our knowledge, all the existing ABE schemes fail to support flexible and direct revocation due to the burdensome update of attribute secret keys and cipher texts. Aiming at tackling the challenge above, in this paper, we formalize the notion of cipher text policy ABE with flexible and direct revocation (FDR-CP-ABE), and give out a concrete construction, which supports direct attribute and user revocation and is applicable to the data sharing architecture. The proposed FDR-CP-ABE scheme outperforms the previous revocation-related methods in that it has constant-size cipher texts and only partial cipher texts need to be updated whenever revocation events occur. Furthermore, we show that our FDR-CP-ABE scheme is provably secure in the standard model and it cannot be achieved by trivial combinations of the techniques of CP-ABE and BE.