摘 要: 针对云计算中存在的安全问题,2005年Sahai和Waters提出了属性基(ABE)加密思想。本文对当前取得的 主要成果进行了较详细分析。首先,阐述了KP-ABE和CP-ABE的研究成果,其次,详述了分层属性基加密(HABE)的 优点以及不足,系统分析了在云平台上针对属性撤销的所取得的成果,并且根据属性基加密机制(ABE)本身所带来的 秘钥滥用问题,分析了学者们所提出的解决方法-可追责任的属性基加密机制,最后,指出了属性加密未来可能的研 究方向。 |
关键词: 基于属性加密;访问控制策略;追责;安全 |
中图分类号: TP309
文献标识码: A
|
基金项目: 大学生实践创新项目;江苏省教育厅自然科学基金(14KJD520006);宿迁学院重点科研基金项目(2016KY04);宿迁学院教改项目(SQC2016JG11). |
|
A Brief Study of Attribute-Based Encryption |
CHEN Jifei,XIANG Henyu,LI Jingwei
|
( Institute of Information and Engineering, Suqian College, Suqian 223800, China)
|
Abstract: In view of the security problems in cloud computing,Sahai and Waters put forward the idea of Attribute-Based Encryption (ABE) in 2005.This paper gives a detailed summary of the main results achieved in current studies.Firstly,the paper expounds Key-Policy Attribute-Based Encryption (KP-ABE)and Ciphertext-Policy Attribute-Based Encryption (CPABE).Secondly,the advantages and disadvantages of Hierarchical Attribute-Based Encryption (HABE) are described in detail.Thirdly,the paper analyzes the achievements in attribute revocation on cloud platforms.According to the abuse of keys caused by ABE,the paper analyzes the accountable ABE mechanism proposed by some scholars.Finally,the paper points out the possible future research directions of ABE. |
Keywords: Attribute-Based Encryption (ABE);access control policy;accountability;security |