Attribute-Based Encryption for Range Attributes
Attribute-Based Encryption for Range Attributes
复制标题
DOI：
10.1007/978-3-319-44618-9_3
复制
发表时间：
2016-08
期刊：
影响因子：
--
通讯作者：
Nuttapong Attrapadung;Goichiro Hanaoka;Kazuto Ogawa;G. Ohtake;Hajime Watanabe;Shota Yamada
中科院分区：
文献类型：
--
作者：
Nuttapong Attrapadung;Goichiro Hanaoka;Kazuto Ogawa;G. Ohtake;Hajime Watanabe;Shota Yamada
基于属性的加密（ABE）是公钥加密的一种高级形式，其中可以使用基于属性和策略的访问控制机制。在传统的ABE中，属性被指定为字符串。然而，在某些应用程序中，将属性指定为数值并考虑确定某个数值范围是否包含某个值的谓词是有用的。这些类型的属性包括时间、位置坐标、人的年龄、等级、身份等。本文介绍了区间隶属度上布尔公式的ABE（ABE-RM）。我们将常规ABE转换为ABE-RM的通用方法。我们的通用转换是有效的，因为它们只引入对数开销（在密钥和密文大小），而不是平凡的方法，这将构成线性开销。通过应用我们的转换到以前的ABE计划，我们得到新的高效和表达的ABE-RM计划。以前的工作，认为ABE与范围属性是特定的，只能处理范围成员的单一关系（帕特森和Quaglia在SCN'10，和Kasamatsu等人。在SCN'12），或有限类的政策，即，只有与门的范围属性（Shiet al.at IEEE S& P '07，和一些后续工作）。我们的计划是通用的，可以处理表达布尔公式。
Attribute-Based Encryption (ABE) is an advanced form of public-key encryption where access control mechanisms based on attributes and policies are possible. In conventional ABE, attributes are specified asstrings. However, there are certain applications where it is useful to specify attributes asnumerical valuesand consider a predicate that determines if a certainnumerical rangewould include a certain value. Examples of these types of attributes include time, position coordinate, person's age, rank, identity, and so on. In this paper, we introduce ABE for boolean formulae over Range Membership (ABE-RM). We show generic methods to convert conventional ABE to ABE-RM. Our generic conversions are efficient as they introduce only logarithmic overheads (in key and ciphertext sizes), as opposed to trivial methods, which would pose linear overheads. By applying our conversion to previous ABE schemes, we obtain new efficient and expressive ABE-RM schemes. Previous works that considered ABE with range attributes are specific and can only deal with either a single relation of range membership (Paterson and Quaglia at SCN'10, and Kasamatsu et al. at SCN'12), or limited classes of policies, namely, only AND-gates of range attributes (Shiet al.at IEEE S&P'07, and some subsequent work). Our schemes are generic and can deal with expressive boolean formulae.