多授权中心可验证的基于属性的加密方案

多授权中心可验证的基于属性的加密方案 Multi-Authority Verifiable Attribute-Based Encryption 唐强 TANG Qiang 1 first-author 姬东耀 JI Dongyao 1 信息安全国家重点实验室/中国科学院研究生院 信息安全国家重点实验室/中国科学院研究生院 State Key Laboratory of Information Security/Graduate University of Chinese Academy of Science State Key Laboratory of Information Security/Graduate University of Chinese Academy of Science 在本文构造的方案中,将可验证的属性加密方案由单个授权中心推广到多个授权中心,使得多授权中心的基于属性的加密在解密出错时,可以检验出是哪个授权中心部分的密钥出错,只需要去找该授权中心重发,不用让所有授权中心均重发;其次各个授权中心在被检查出错时,也只需要重发对应部分的信息;当密钥通过验证,而解密依然出错,说明是加密过程中或者密文跟随的消息属性出了问题,不会出现无法判断哪里出错的情况.同时证明了加入可验证性后,在经过修正的安全模型下,并不影响多授权中心基于属性加密的安全性. This paper generalizes the verifiable attribute-based encryption（VABE） with a single authority to the multi-authority scenario.When the authorized user could not decrypt the message in a multi-authority ABE,the user could figure out which authority’s secret key has problem and ask this authority to resend the key.Secondly,when an authority’s key did not pass the verification,it needs only to resend the corresponding part of the key instead of all the information for computing the key.Thirdly,if all keys are verified right,but the user still could not decrypt,then,something must be wrong with the ciphertext or the attributes.At last,we prove that adding the information for verification does not reduce the security of the multi-authority ABE. 基于属性的加密 多授权中心 可验证秘密分享 可证安全 attribute-based encryption multi-authority verifiable secret sharing provable security TP393.08 国家重点基础研究发展计划（973）项目（2007CB311202）;国家高技术研究发展计划（863）项目（2006AA01Z427）;国家自然科学基金资助项目（90604010） 2008-05-01 2021-04-01 5