CABE: A New Comparable Attribute-Based Encryption Construction with 0-Encoding and 1-Encoding
CABE: A New Comparable Attribute-Based Encryption Construction with 0-Encoding and 1-Encoding
复制标题
CABE：一种新的可比较的基于属性的0-编码和1-编码加密结构
DOI：
10.1109/tc.2017.2693265
复制
发表时间：
2017
影响因子：
3.7
通讯作者：
Hong Peilin
中科院分区：
文献类型：
--
作者：
Xue Kaiping;Hong Jianan;Xue Yingjie;Wei David S. L.;Yu Nenghai;Hong Peilin
基于属性的加密（ABE）是近年来密码学研究的热点。它可以在各种情况下使用，因为它提供了一种灵活的方式来进行细粒度的数据访问控制。尽管ABE在数据访问控制方面有很大的优势，但现有的基于ABE的访问控制系统在对访问行为进行判断时，往往根据属性的比较来判断访问行为，如“大于<inline-formula><tex-math notation="LaTeX">$x$</tex-math><alternatives><inline-graphic xlink:href="xue-ieq1-2693265.gif"/></alternatives></inline-formula>“或“小于<inline-formula><tex-math notation="LaTeX">$x$</tex-math><alternatives><inline-graphic xlink:href="xue-ieq2-2693265.gif"/></alternatives></inline-formula>“，本文称之为<italic>可比较属性</italic>。在本文中，基于一组精心设计的子属性表示每个可比属性，我们构造了一个可比属性为基础的加密方案（简称CABE），以解决上述问题。新颖之处在于，我们提供了一个更有效的建设的基础上产生和管理的子属性的概念0-编码和1-编码。广泛的分析表明：与已有的方案相比，该方案大大减少了存储、通信和计算开销，从而更有效地处理具有可比属性的应用。
Attribute-based encryption (ABE) has opened up a popular research topic in cryptography over the past few years. It can be used in various circumstances, as it provides a flexible way to conduct fine-grained data access control. Despite its great advantages in data access control, current ABE based access control system cannot satisfy the requirement well when the system judges the access behavior according to attribute comparison, such as “greater than <inline-formula><tex-math notation="LaTeX">$x$</tex-math><alternatives> <inline-graphic xlink:href="xue-ieq1-2693265.gif"/></alternatives></inline-formula>” or “less than <inline-formula><tex-math notation="LaTeX">$x$</tex-math><alternatives> <inline-graphic xlink:href="xue-ieq2-2693265.gif"/></alternatives></inline-formula>”, which are called <italic> comparable attributes</italic> in this paper. In this paper, based on a set of well-designed sub-attributes representing each comparable attribute, we construct a comparable attribute-based encryption scheme (CABE for short) to address the aforementioned problem. The novelty lies in that we provide a more efficient construction based on the generation and management of the sub-attributes with the notion of 0-encoding and 1-encoding. Extensive analysis shows that: Compared with the existing schemes, our scheme drastically decreases the storage, communication and computation overheads, and thus is more efficient in dealing with the applications with comparable attributes.