针对单授权机构下属性基加密方案中的密钥滥用问题,以及加密机制本身存在的效率和安全问题,研究一种在多授权机构下可对非法用户(或叛徒)进行撤销的属性基加密方案。在单授权机构下属性基加密方案的基础上,利用双线性映射和线性秘密共享方案等来实现多个授权机构相互协作而不需要中央机构控制,并结合完全子树架构将用户映射到二叉树上来提高撤销叛徒的效率,将单授权方案转化成多授权机构下的可撤销叛徒的属性基加密方案MA-TRABE,还分析了该方案的抗串谋攻击安全性和多授权机构下的安全性。根据电子商务安全支付的需要,设计了MA-TRABE的实际应用。
Due to the key-abuse problem in the single authority attribute-based encryption, as well as the efficiency and security issues because of the encryption mechanism, this paper studies a multi-authority attribute-based encryption which can implement the revocation of unauthorized users(or traitors). Using bilinear mapping and linear secret sharing scheme to implement the interaction of multiple authorities without the need for a central authority, as well as combing with the complete subtree structure to map the users to a binary tree for efficiency improvement of traitor revocation, the paper transfers a single authority scheme into a multi-authority attribute-based encryption scheme for traitor revocation called MA-TRABE. It also analyzes the security under collusion attack and multi-authority circumstances. According to the needs of security payment in the e-commerce, the practical application of MA-TRABE is designed.