基于访问控制环境的加密系统和认证技术研究

With the merging development of cloud computing, Internet of Things and mobile internet, amount of users who are in burden of computation and storage resources prefer to upload numerous and complicate massive data to the third computation and storage severs. It is a primary and powerful method to employ the data privacy protection and authentication technologies which meet certain access control requirements, to ensure a reliable and secure network. Our project mainly focus on the research on encryption and authentication technology under newly access control environment, which includes: (1) In terms of the features of network services and requirements of access control environment, we will present efficient attribute-based encryption with constant-size ciphertexts based on static assumptions in prime-order bilinear groups, and efficient provable secure functional encryption schemes which meets specific requirement. (2) In view of the “many-to-many” relationships between users appeared in newly networks, we will abstract and establish reasonable basis of trust and security models, and moreover provide both multi-signcryption schemes and password authentication schemes with strong functionality. In order to provide users with a reliable and secure big data network, we will take efforts to promote the application and popularization of newly network services in the era of big data through the above our stated two aspects.

随着云计算、物联网及移动互联网的普及，大数据时代已经来临。大量用户将纷繁复杂的海量数据存储在第三方数据服务和计算机构中，使得具有一定访问控制要求的数据隐私保护和认证技术成为保障这些网络正常运行首要条件。本项目以在新型访问控制环境下的加密和认证技术为题开展研究，主要研究：（1）依据网络服务特点和访问控制环境的要求，设计基于素数阶群上可归结于标准假设的高效短密文属性基加密方案和满足特殊功能的高效可证安全函数加密方案；（2）针对新型网络用户“多对多”关系，抽象和建立合理的信任基础以及安全模型，构造功能性强的多方签密方案和口令认证方案。通过以上两个方面技术的研究推动新型网络在大数据时代的应用和普及，为用户提供一个可靠安全的大数据网络。

随着云计算、物联网及移动互联网的普及，大数据时代已经来临。大量用户将纷繁复杂的 海量数据存储在第三方数据服务和计算机构中，使得具有一定访问控制要求的数据隐私保护和认证技术成为保障这些网络正常运行首要条件。本项目以在新型访问控制环境下的加密和认证技术为题开展研究，顺利完成了预定的研究任务，取得了以下研究成果：（1）设计了不同安全模型下高效的属性基加密系统和函数加密系统；（2）对属性基加密系统和函数加密系统进行了应用拓展；（3）基于网络服务信任模型的认证方案;（4）为不同网络服务需求设计了基于密码技术的安全解决方案。