多方应用场景下密文访问控制和匿名认证关键技术研究

Attribute-based encryption can provide fine-grained access control on data decryption privilege, attribute-based signature can achieve anonymous authentication, and attribute-based signcryption can efficiently combine the two functions of attribute-based encryption and attribute-based signature. Therefore, attribute-based cryptosystem has broad applications in networking, cloud computing, big data and other new network services.. Based on full security, efficiency, expression ability, this project will study attribute-based encryption, attribute-based signature and attribute-based signcryption, which are three key cryptography technologies of ciphertext access control and anonymous authentication in multi application scenarios, from the following four aspects: (1) to solve the key escrow problem of attribute-based cryptosystem, we will study the multi-authority attribute-based cryptosystem in which all the authorities are independent; (2) to solve the two types of private key abuse problem, we will study the traceable and accountable attribute-based cryptosystem; (3)to solve the attribute revocation problem in attribute-based cryptosystem, we will study directly attribute revocable attribute-based cryptosystem; (4) to protect the privacy of access policy, we will study attribute-based cryptosystem with hidden policy.. The purpose of this paper is to improve the integrity of the security system of attribute-based cryptosystem, and provide safe and effective theoretical support for application.

属性基加密可以对数据解密权限进行细粒度的访问控制，属性基签名可以实现匿名认证，而属性基签密则可以高效结合属性基加密和属性基签名两项功能。因此，这三种属性基密码在物联网、云计算、大数据等新型网络服务中有光明的应用前景。. 在完全安全性、高效率、强表达能力三大指标基础上，本项目将对多方应用场景下密文访问控制和匿名认证的三个关键技术：属性基加密、属性基签名、属性基签密，着重开展以下4方面研究：（1）针对属性基密码系统中密钥托管问题，在各属性机构独立的情况下，开展多机构属性基密码研究；（2）针对属性基密码系统中两类私钥滥用问题，开展可追踪、可定责属性基密码研究；（3）针对属性基密码系统中属性撤销问题，开展可撤销属性的属性基密码研究。（4）针对访问策略的隐私保护，开展策略隐藏属性基密码研究。. 本项目的研究可以完善属性基密码系统安全性的完整性，为其从理论走向实际提供安全有效的理论支撑。

属性基加密是身份基加密的扩展，通过添加访问策略实现密数据的细粒度访问控制，特别适用于物联网、云计算、大数据等新型多方网络服务，是当前网络安全与密码学领域研究的热点之一。本课题针对属性基密码系统中三个重要问题：密钥托管问题、私钥滥用问题、属性撤销问题，在兼顾安全性、高效率、强表达能力的基础上，开展了多机构属性基加密、可追踪定责属性基加密、可撤销属性基加密、抗泄露属性基加密研究。经过三年的研究，对这几个问题相应给出了一系列研究成果。这些成果丰富了属性基密码的理论研究，为其从理论走向实际提供了有效的理论支撑。大部分成果已形成学术论文，在国内外重要期刊和学术会议发表相关论文9篇，其中SCI期刊5篇，EI检索3篇。获批国家发明专利授权2项。