面向边缘计算的属性加密方案

doi:10.19678/j.issn.1000-3428.0057449

计算机工程 ›› 2021, Vol. 47 ›› Issue (1): 37-43. doi: 10.19678/j.issn.1000-3428.0057449

面向边缘计算的属性加密方案

彭红艳, 凌娇, 覃少华, 邓剑锋

广西师范大学计算机科学与信息工程学院, 广西桂林 541004

收稿日期:2020-02-21 修回日期:2020-03-21 发布日期:2020-03-27
作者简介:彭红艳(1973-),女,副教授、硕士,主研方向为网络安全、数据分析;凌娇,硕士研究生;覃少华(通信作者),副教授、博士;邓剑锋,助理研究员、博士。
基金资助:
国家自然科学基金（61862008，81860635）。

Attribute-Based Encryption Scheme for Edge Computing

PENG Hongyan, LING Jiao, QIN Shaohua, DENG Jianfeng

School of Computer Science and Information Engineering, Guangxi Normal University, Guilin, Guangxi 541004, China

Received:2020-02-21 Revised:2020-03-21 Published:2020-03-27

摘要/Abstract

摘要： 传统云环境下的属性加密方案在判定用户访问权限时通常仅依据年龄和职业等用户常规属性，而忽视了访问时间和位置的约束问题。为较好满足边缘计算的实时性和移动性需求，提出一种支持时间与位置约束的多授权外包属性加密方案。通过将时间域与位置域信息同时引入属性加密过程，实现更细粒度的访问控制。采用多授权机构共同管理属性信息，解决单授权机构的性能瓶颈问题，满足用户跨域访问需求。针对边缘计算中移动终端资源受限问题，将大部分解密计算外包至边缘节点，减轻移动终端设备负担。分析结果表明，在边缘计算环境下，该方案以较低的计算和存储开销实现了具有时间和位置约束的访问控制，并且可有效保障用户数据安全。

关键词: 属性加密, 时间约束, 位置约束, 边缘计算, 解密外包

Abstract: When existing Attribute-Based Encryption(ABE) schemes for traditional cloud environment determine the access rights of users,they consider only general attributes such as occupation and age,ignoring time and location constraints,which makes them fail to meet the real-time performance and mobility requirements of edge computing.Therefore,this paper proposes a time and location multi-authority outsourcing ABE scheme.The scheme introduces the time domain information and location domain information into attribute encryption,enabling a more fine-grained access control function.Simultaneously the scheme uses multi-authority management of attribute information to solve the performance bottleneck of the single-authority management,meeting the needs of users' cross-domain access.To address the limitation of mobile terminal resources in edge computing,most of the decryption calculations are outsourced to edge nodes to reduce the burden of mobile terminal devices.Analysis results show that the scheme achieves access control with access time and location constraints by reducing computing and storage overhead,and effectively guarantees data security.

Key words: Attribute-Based Encryption(ABE), time constraint, location constraint, edge computing, decryption outsourcing

中图分类号:

TP309.7

彭红艳, 凌娇, 覃少华, 邓剑锋. 面向边缘计算的属性加密方案[J]. 计算机工程, 2021, 47(1): 37-43.

PENG Hongyan, LING Jiao, QIN Shaohua, DENG Jianfeng. Attribute-Based Encryption Scheme for Edge Computing[J]. Computer Engineering, 2021, 47(1): 37-43.

https://www.ecice06.com/CN/Y2021/V47/I1/37

图/表 4

参考文献

[1] ZHANG Yuqing,WANG Xiaofei,LIU Xuefeng,et al.Survey on cloud computing security[J].Journal of Software,2016,27(6):1328-1348.(in Chinese)张玉清,王晓菲,刘雪峰,等.云计算环境安全综述[J].软件学报,2016,27(6):1328-1348.
[2] WATERS B.Ciphertext-policy attribute-based encryption:an expressive,efficient,and provably secure realization[C]//Proceedings of the 14th International Conference on Practice and Theory in Public Key Cryptography.New York,USA:ACM Press,2011:53-70.
[3] BETHENCOURT J,SAHAI A,WATERS B.Ciphertext-policy attribute-based encryption[C]//Proceedings of 2007 IEEE Symposium on Security and Privacy.Washington D.C.,USA:IEEE Press,2007:321-334.
[4] GOYAL V,PANDEY O,SAHAI A,et al.Attribute-based encryption for fine-grained access control of encrypted data[C]//Proceedings of ACM Conference on Computer and Communications Security.New York,USA:ACM Press,2006:89-98.
[5] QIN Baodong,ZHENG Dong.Generic approach to outsource the decryption of attribute-based encryption in cloud computing[J].IEEE Access,2019,7:42331-42342.
[6] FU Junsong,WANG Na.A practical attribute-based document collection hierarchical encryption scheme in cloud computing[J].IEEE Access,2019,7:36218-36232.
[7] WANG Shangping,ZHANG Duo,ZHANG Yaling,et al.Efficiently revocable and searchable attribute-based encryption scheme for mobile cloud storage[J].IEEE Access,2018,6:30444-30457.
[8] LEWKO A B,WATERS B.Decentralizing attribute-based encryption[C]//Proceedings of EUROCRYPT'11.Berlin,Germany:Springer,2011:568-588.
[9] YANG Kan,JIA Xiaohua,REN Kui,et al.DAC-MACS:effective data access control for multi-authority cloud storage systems[J].IEEE Transactions on Information Forensics and Security,2013,8(11):1790-1801.
[10] BELGUITH S,KAANICHE N,LAURENT M,et al.PHOABE:securely outsourcing multi-authority attribute based encryption with policy hidden for cloud assisted IoT[J].Computer Networks,2018,133:141-156.
[11] YAN Xixi,NI Hao,LIU Yuan,et al.Privacy-preserving multi-authority attribute-based encryption with dynamic policy updating in PHR[J].Computer Science and Information Systems,2019,16(3):831-847.
[12] ZHANG Jiale,CHEN Bing,HU Feng,et al.Survey on data security and privacy-preserving for the research of edge computing[J].Journal on Communications,2018,39(3):1-21.
[13] GREEN M,HOHENBERGER S,WATERS B.Outsourcing the decryption of ABE ciphertexts[C]//Proceedings of the 20th USENIX Conference on Security.New York,USA:ACM Press,2011:1-34.
[14] LI Wenmin,LI Xuelei,WEN Qiaoyan,et al.Flexible CP-ABE based access control on encrypted data for mobile users in hybrid cloud system[J].Journal of Computer Science and Technology,2017,32(5):974-990.
[15] ZHANG P,CHEN Z,LIU J K,et al.An efficient access control scheme with outsourcing capability and attribute update for fog computing[J].Future Generation Computer Systems,2018,78:753-762.
[16] ZUO Cong,SHAO Jun,WEI Guiyi,et al.CCA-secure ABE with outsourced decryption for fog computing[J].Future Generation Computer Systems,2018,78:730-738.
[17] HONG Jianan,XUE Kaiping,LI Wei,et al.TAFC:time and attribute factors combined access control for time-sensitive data in public cloud[C]//Proceedings of 2015 IEEE Global Communications Conference.Washington D.C.,USA:IEEE Press,2015:6-14.
[18] YANG Kan,LIU Zhen,JIA Xiaohua,et al.Time-domain attribute-based access control for cloud-based video content sharing:a cryptographic approach[J].IEEE Transactions on Multimedia,2016,18(5):940-950.
[19] ANDROULAKI E,SORIENTE C,MALISA L,et al.Enforcing location and time-based access control on cloud-stored data[C]//Proceedings of the 34th International Conference on Distributed Computing Systems.Washington D.C.,USA:IEEE Press,2014:637-648.
[20] SHAO Jun,LU Rongxing,LIN Xiaodong.FINE:a fine-grained privacy-preserving location-based service framework for mobile devices[C]//Proceedings of IEEE Conference on Computer Communications.Washington D.C.,USA:IEEE Press,2014:1-7.
[21] XUE Yingjie,HONG Jianan,LI Wei,et al.LABAC:a location-aware attribute-based access control scheme for cloud storage[C]//Proceedings of IEEE Global Communications Conference.Washington D.C.,USA:IEEE Press,2016:614-623.

选择文件类型/文献管理软件名称

选择包含的内容

面向边缘计算的属性加密方案

Attribute-Based Encryption Scheme for Edge Computing

RichHTML

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

图/表 4

参考文献

相关文章 15

编辑推荐

Metrics

本文评价

[1]	张俊娜, 李天泽, 赵晓焱, 袁培燕. 一种基于DQN的去中心化优先级卸载策略[J]. 计算机工程, 2024, 50(9): 235-245.
[2]	石琼, 段辉, 师智斌. 基于深度强化学习的可信任务卸载方案[J]. 计算机工程, 2024, 50(8): 142-152.
[3]	周浚辉, 徐鹏, 孙胜利. 协同感知系统中一种基于信息年龄优化的服务策略[J]. 计算机工程, 2024, 50(8): 165-181.
[4]	张冀, 龚雯雯, 朵春红, 齐国梁. 面向多智能体与双层卸载的车联网卸载算法[J]. 计算机工程, 2024, 50(8): 182-197.
[5]	陈姣, 沈艳. 面向缓存机制的移动边缘计算任务卸载研究[J]. 计算机工程, 2024, 50(7): 194-203.
[6]	赵云涛, 肖俊杰, 李维刚, 熊雅婷. 基于改进PPYOLOE-R的信息码矫正研究[J]. 计算机工程, 2024, 50(6): 358-366.
[7]	曾耀平, 夏玉婷, 江伟伟, 刘月强. 加权能耗最小化的无人机辅助移动边缘计算策略研究[J]. 计算机工程, 2024, 50(2): 288-297.
[8]	张俊娜, 韩超臣, 陈家伟, 赵晓焱, 袁培燕. 一种联合边缘服务器部署与服务放置的方法[J]. 计算机工程, 2024, 50(10): 266-280.
[9]	杨建军, 唐东明, 李驹光, 肖宇峰. 基于改进人工蜂鸟算法的MEC任务卸载策略[J]. 计算机工程, 2024, 50(10): 291-301.
[10]	万昊楠, 吴飞, 尹玲. 基于自适应无人机数量的节时部署优化算法[J]. 计算机工程, 2024, 50(10): 302-312.
[11]	申秀雨, 姬伟峰, 李映岐, 吴玄. 面向边缘计算的TCA1C DDoS检测模型[J]. 计算机工程, 2024, 50(1): 198-205.
[12]	彭世明, 林士飏, 贾硕, 杨苗会. 基于负载预测的多目标优化任务卸载策略[J]. 计算机工程, 2024, 50(1): 206-215.
[13]	班玉琦, 段利国, 温昊宇, 李爱萍, 赵菊敏. 面向移动感知的计算卸载及资源分配策略研究[J]. 计算机工程, 2023, 49(8): 163-173.
[14]	蔡星娟, 郭彦亨, 赵天浩, 张文生. 基于进化多任务的边缘计算服务部署和任务卸载[J]. 计算机工程, 2023, 49(7): 1-9.
[15]	梅晶, 戴龙宝, 童钊, 邓昕, 王嘉珂. 资源约束下基于Lyapunov优化的自适应卸载算法[J]. 计算机工程, 2023, 49(7): 34-46.

模态框（Modal）标题

选择文件类型/文献管理软件名称

选择包含的内容

面向边缘计算的属性加密方案

Attribute-Based Encryption Scheme for Edge Computing

RichHTML

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

图/表 4

参考文献

相关文章 15

编辑推荐

Metrics

本文评价