可验证外包数据访问控制方案的分析与改进

在双系统模型中,基于密钥封装机制,提出一个可验证的外包加密、解密方案。将计算量大的运算外包给加密服务提供者(ESP)和解密服务提供商(DSP),减少本地用户的计算量。同时引入防陷害功能;即若DSP返回正确结果,用户不能恶意指责DSP返回的结果为不正确;这可以有效解决用户和外包计算服务提供商之间的争议,服务提供者也将不会恶意给出错误的结果。提出的外包密钥生成算法,使得用户只进行一次指数运算,提高了转换密钥的生成效率。与同类的方案相比,本方案实现了细粒度的访问控制,增加了方案在实际应用中的可行性。

Analysis and improvement of data access control scheme with efficient Verifiable outsourced

Based on the key encapsulation mechanism, a verifiable outsourcing encryption and decryption scheme is proposed in the dual system model. The heavily calculated operations are outsourced to the cryptographic service provider (ESP) and the decryption service provider (DSP), and the user performs only one modulo exponentiation. This allows any dispute between users and outsourced computing service providers to be easier to resolve, and the service provider will not be malicious to give false results. In addition, the outsourcing key generation algorithm proposed in this paper enables users to perform only one index operation, which greatly improves the generation efficiency of the transformation key. Compared with similar schemes, the new scheme not only achieves fine-grained access control, but also greatly increases the feasibility of the proposed scheme in practical applications.