Optimization for Broadcast Encryption in Cloud Using Extended Public Key
-
摘要: 基于广播加密的云存储系统受到研究者的关注.然而，基本的广播加密方案不能适应云存储环境中用户和权限的动态变更情况.针对广播加密中密钥管理分发开销大的问题，提出一种扩展公钥的广播加密优化方法，通过保留初始产生公钥时使用的部分私有参数，当用户加入或撤离系统时，使用保留的私有参数产生新的公钥来加密数据.这样，合法用户仍可以使用之前已分发的私钥解密新公钥加密的数据，从而避免了用户动态变化时公钥的频繁变化和密钥的重复分发.通过引入懒惰回收机制，降低了权限变更和密钥定期更新带来的开销.测试结果表明：采用优化方案后，增加用户数量和权限撤销时，系统性能得到较大提高.Abstract: Security issues have been a major hurdle for the application of cloud storage. As data encryption is the mainstream method to ensure confidentiality, users always share their data by means of key's management and distribution. However, how to manage massive keys and distribute them securely and efficiently is a challenge in cloud storage. In recent years, broadcast encryption scheme has been paid more attention by researchers to mitigate above problems for cloud data sharing. Since current schemes take insufficient account of changes of users and users's privilege, they do not perform well in cloud. To reduce the overhead of key distribution, an optimization method is proposed for public-key based broadcast encryption in this paper. First, the scope of public keys is expanded to two or more times and the initial related parameters used for generating public keys are kept simultaneously. These parameters can ensure private keys distributed previously still available when they are employed to generate the new public keys for new valid users, thus greatly decreases the cost of redistributing private keys. Second, lazy revocation is adopted to reduce the cost of updating keys. Experimental results show that our optimized method outperforms the existing schemes while adding new users and revoking users' privilege in cloud.
-
Keywords:
- cloud storage /
- broadcast encryption /
- extended public key /
- key management /
- optimization
-
-
期刊类型引用(8)
1. 唐旭，张多利，王杰，宋宇鲲. 异构多核处理器多发射动态调度技术研究. 合肥工业大学学报(自然科学版). 2023(05): 632-640 . 
百度学术
2. 纪元，郑卫波，王梓. 基于容器的安全接入虚拟化. 计算机与现代化. 2022(09): 106-110+118 . 百度学术
3. 阳勇，孟相如，康巧燕，韩晓阳. 拓扑与资源感知的虚拟网络功能迁移方法. 计算机科学与探索. 2021(11): 2161-2170 . 百度学术
4. 曾理，叶晓舟，王玲芳. DPDK技术应用研究综述. 网络新媒体技术. 2020(02): 1-8 . 百度学术
5. 邓理，吴伟楠，朱正一，陈鸣. DiffSec:一种差别性的智能网络安全服务模型. 计算机研究与发展. 2019(05): 955-966 . 本站查看
6. 房一泉，姚俊，万浩，徐鹏. 教育信息化大平台的构建. 化工高等教育. 2019(03): 38-42+89 . 百度学术
7. 李佑文，褚红健，王志心. 基于网络负载均衡的综合监控系统网关设计. 江苏科技信息. 2019(32): 57-59 . 百度学术
8. 胡洪云，符小周. 基于网络功能虚拟化的高性能负载均衡研究. 佳木斯职业学院学报. 2018(11): 393-394 . 百度学术
其他类型引用(4)
计量
- 文章访问数: 1085
- HTML全文浏览量: 2
- PDF下载量: 495
- 被引次数: 12
下载:
