摘要： 雾计算将云计算的计算能力、数据分析应用等扩展到网络边缘，可满足物联网设备的低时延、移动性等要求，但同时也存在数据安全和隐私保护问题。传统云计算中的属性基加密技术不适用于雾环境中计算资源有限的物联网设备，并且难以管理属性变更。为此，提出一种支持加解密外包和撤销的属性基加密方案，构建"云-雾-终端"的三层系统模型，通过引入属性组密钥的技术，实现动态密钥更新，满足雾计算中属性即时撤销的要求。在此基础上，将终端设备中部分复杂的加解密运算外包给雾节点，以提高计算效率。实验结果表明，与KeyGen、Enc等方案相比，该方案具有更优的计算高效性和可靠性。

关键词: 雾计算, 属性基加密, 加解密外包, 属性撤销, 属性组密钥, 密文策略

Abstract: Fog computing extends the computing power and data analysis applications of cloud computing to the edge of the network,meeting the requirements of low latency and mobility of the Internet of Things(IoT) devices,but at the same time generating new data security and privacy protection problems.The Attribute-Based Encryption(ABE) technology in the traditional cloud computing is not suitable for the IoT devices with limited computing resources in the fog environment,and the attribute change is difficult to manage.Therefore,this paper proposes an ABE scheme that supports encryption and decryption outsourcing and revocation in fog computing.A three-layer system model of "cloud-fog-terminal" is constructed,and by introducing the technology of the attribute group key,the key is dynamically updated,thus the requirement of immediate cancellation of the attribute is satisfied.Some complicated encryption and decryption operations in the terminal device are outsourced to the fog node,which greatly improves the calculation efficiency.Experimental results show that the scheme has better computational efficiency and reliability than KeyGen and Enc schemes.

Key words: fog computing, Attribute-Based Encryption(ABE), encryption and decryption outsourcing, attribute revocation, attribute group key, ciphertext policy

中图分类号: 

• TP309