摘要:在移动社交网络中，用户可以通过匹配彼此的特征属性进行朋友发现，针对单属性管理中心用户属性密钥更容易被攻击者窃取和服务高峰出现的性能瓶颈问题，提出一种由多个属性管理中心、分级管理用户属性子密钥方案.在该方案中，多个属性中心细粒度地管理用户的不同特征属性，并根据用户特征属性生成属性子密钥，交友请求者只有满足交友发起者设置的交友访问策略，才能正确地将各子密钥组合成完整的解密密钥，进而解密存储在交友中心的用户加密数据文件.通过对属性子密钥进行分级分类管理，不仅避免了单属性管理中心容易被攻击而造成的密钥泄漏以及单点故障风险，而且多属性中心协同工作提高了交友匹配计算效率.通过验证方案是否可挑战明文攻击，证明可达到CPA安全，可以有效地保护用户的隐私不被泄露.同时与既有方案进行了充分的对比实验，确保该方案计算开销最小，可以提供良好的用户体验.



Abstract:In mobile social networks, users can look for friends by matching their attributes. In order to solve the problem that the user's attribute is easy to be stolen by the attackers in the single authority center and performance bottleneck occurs in the peak of service, this work proposes a scheme where a multi-attribute management center hierarchically manages user attributes' sub-keys. The scheme involves several attribute centers which perform fine-grained management on different user attributes. After the friend requester's attributes meet the friend access control policy of the friend-making initiator, the friend requester can correctly combine the sub-keys into a complete decryption key and decrypt the user's data file to store in the friend-making server. By introducing hierarchical management in terms of attribute sub-keys, the proposed scheme not only effectively prevents key disclosure when the single-authority management center suffers from attacks, but also improves the computation efficiency of friend profile matching through cooperative work of multiple attribute center. Experiments are conducted to check whether the proposed scheme can challenge the chosen plaintext attack, and certify that the scheme can achieve CPA secure level while effectively protecting the user's privacy security. Extensive comparisons with existing schemes demonstrate the ability of the proposed scheme to entail the lowest computational overheads and provide excellent user experience.



PDF全文下载地址:

http://jos.org.cn/jos/article/pdf/5295