在本文构造的方案中,将可验证的属性加密方案由单个授权中心推广到多个授权中心,使得多授权中心的基于属性的加密在解密出错时,可以检验出是哪个授权中心部分的密钥出错,只需要去找该授权中心重发,不用让所有授权中心均重发;其次各个授权中心在被检查出错时,也只需要重发对应部分的信息;当密钥通过验证,而解密依然出错,说明是加密过程中或者密文跟随的消息属性出了问题,不会出现无法判断哪里出错的情况.同时证明了加入可验证性后,在经过修正的安全模型下,并不影响多授权中心基于属性加密的安全性.
This paper generalizes the verifiable attribute-based encryption(VABE) with a single au thority to the multi-authority scenario. When the authorized user could not deerypt the message in a multiauthority ABE, the user could figure out which authority's secret key has problem and ask this authority to resend the key. Secondly, when an authority's key did not pass the verification, it needs only to resend the corresponding part of the key instead of all the information for computing the key. Thirdly, if all keys are verified right, but the user still could not decrypt, then, something must be wrong with the ciphertext or the attributes. At last, we prove that adding the information for verification does not reduce the security of the multi-authority ABE.