基于属性的签名近年来由于云计算的大规模应用而备受关注。为了有效保护云计算环境下数据中的敏感信息,该文将可净化的思想引入基于属性的签名中,提出云计算环境下基于属性的可净化签名的方案。该方案中的签名者可以指定净化者对已经签名的文件进行改动,使之隐私部分不再呈现,可以有效解决云端数据中敏感信息隐藏与签名者隐私性的问题。方案在标准模型下证明基于属性的可净化签名方案是不可伪造的。分析表明,所提方案可以解决云计算环境下数据的敏感信息隐藏问题。
Attribute signature attracts much attention due to the large-scale applications of cloud computing. Sensitive information in the document needs to be hidden in cloud computing environment, and Attribute Based Sanitizable Signature (ABSS) scheme in cloud computing environment is proposed to solve this issue. The ABSS scheme brings the character of sanitizable into Attribute Based Signature (ABS) in order to hide sensitive information, ensure signer’s anonymity and achieve fine-grained access control. The ABSS scheme constructed in this paper is proved to be unforged in the standard model. Analysis shows that the proposed ABSS scheme is more appropriate for cloud computing environment to hide the sensitive information of the data.