针对目前基于属性的广播加密方案存在密文较长、加/解密时计算花销较大等问题,提出了一种高效的密文策略的基于属性的广播加密方案。该方案基于椭圆曲线加密算法,采用动态门限访问结构,加密方可根据需要动态调整门限值。该方案仅当用户的身份信息包含在广播的授权用户集合中且用户的属性包含在访问结构中时,解密方方可通过双线性配对运算进行密文解密。方案的密文长度及加/解密双线性对运算次数固定,计算效率高且通信开销小。仿真结果验证了方案的有效性。方案安全性是建立在q-BDHE假设之上,在标准模型下可证CPA安全。
There are lots of drawbacks in present attribute-based broadcast encryption schemes,such as high computational cost of encryption and decryption,and low transmission efficiency due to its long ciphertext. In order to solve these problems,this paper presented an efficient ciphertext policy attribute-based broadcast encryption scheme. The scheme based on elliptic curve encryption algorithm used dynamic threshold access structure and the threshold value could be adjusted dynamically according to the need by the encrypting party. A user could decrypt the ciphertext by bilinear pairing operations only if its identity information was included in the broadcast set and its attributes satisfied the access policy. In the scheme,the ciphertext size and the bilinear pairing operation times in encryption and decryption was constant,which could reduce the overhead of broadcast communication and ensure the high efficiency. The simulation results verify the effectiveness of the scheme. In additional,the security of scheme which can be proved under the decisional q-bilinear Differ-Hellman exponent assumption has CPA secure in the standard model.