面向移动云存储的属性基解密服务中间件

属性基加密（ABE）算法支持对云端数据的细粒度访问控制。针对属性基解密计算复杂度高,难以在资源受限的移动终端上实现的问题,提出并实现了一种面向移动云存储的属性基解密服务中间件。在保证密文信息不被中间件获取的前提下,中间件为移动终端代理属性基解密服务,实现了基于树形结构的线性秘密共享（LSSS）矩阵求解,降低了终端的计算与通信开销,提高了解密速度;属性权威可以在不需要用户参与的条件下,即时、细粒度地撤销用户属性;所有接口均使用Restful服务,保证了通用性。实验结果表明,属性基解密服务中间件提高移动设备解密性能近30倍,具备较好的并发性能,属性撤销具有实用性。     

Shear banding phenomenon during severe plastic deformation of an AZ31 magnesium alloy

Severe plastic deformation was applied on a wrought AZ31 magnesium alloy by a new method called accumulative back extrusion (ABE). Instabilities of plastic flow in the form of localized shear bands were experimentally observed during ABE processing of the AZ31 alloy. The obtained microstructures show the appearance of shear bands in ABE processed specimens, the extent of which was observed to be decreased by increasing the temperature. The restricted flow (due to the deformation geometry) was discussed as the main cause of the latter behavior. A noticeable grain refinement was observed inside the shear bands which was attributed to the occurrence of continuous dynamic recrystallization inside the bands. To analyze the homogeneity of mechanical properties, the microhardness variations from the deformed bulk to the shear bands were measured and interpreted. The role of shear banding in grain refinement with no harmful effect on material soundness was explained.     

一种支持分级用户访问的文件分层CP-ABE方案

文件分层的密文策略基于属性的加密（FH-CP-ABE）方案实现了同一访问策略的多层次文件加密,节省了加解密的计算开销和密文的存储开销.然而,目前的文件分层CP-ABE方案不支持分级用户访问,且存在越权访问的问题.为此,提出一种支持分级用户访问的文件分层CP-ABE方案.在所提方案中,通过构造分级用户访问树,并重新构造密文子项以支持分级用户的访问需求,同时消除用户进行越权访问的可能性.安全性分析表明,所提方案能够抵御选择明文攻击.理论分析和实验分析均表明,与相关方案相比,所提方案在计算和存储方面具有更高的效率.     

Adsorption of butanol from aqueous solution onto a new type of macroporous adsorption resin: Studies of adsorption isotherms and kinetics simulation

BACKGROUND: Owing to the rapid depletion of petroleum fuel, the production of bio‐butanol has attracted much attention. However, low butanol productivity severely limits its potential industrial application. It is important to establish an approach for recovering low‐concentration butanol from fermentation broth. Experiments were conducted using batch adsorption mode under different conditions of initial butanol concentration and temperature. Batch adsorption data were fitted to Langmuir and Freundlich isotherms and the macropore diffusion, pseudo‐first‐ and second‐order models for kinetic study. RESULTS: The maximum adsorption capacity of butanol onto KA‐I resin increase with increasing temperature, ranged from 139.836 to 304.397 mg g^?1. The equilibrium adsorption data were well fitted by the Langmuir isotherm. The adsorption kinetics was more accurately represented by the macropore diffusion model, which also clearly predicted the intraparticle distribution of the concentration. The effective pore diffusivity (D_p) was dependent upon temperature, but independent of initial butanol concentration, and was 0.251 × 10^?10, 0.73 × 10^?10, 1.32 × 10^?10 and 4.31 × 10^?10 m² s^?1 at 283.13, 293.13, 303.13 and 310.13 K, respectively. CONCLUSION: This work demonstrates that KA‐I resin is an efficient adsorbent for the removal of butanol from aqueous solutions and available for practical applications for future in situ product recovery of butanol from ABE fermentation broth. Copyright © 2012 Society of Chemical Industry     

生物丁醇分离技术的研究进展及发展趋势

生物基（正）丁醇是一种重要的化学品和替代燃料,其主要制备途径为糖质底物的丙酮-丁醇-乙醇（ABE）发酵。受制于发酵副产物多、溶剂浓度低、产物共沸等因素,传统的生物丁醇分离过程存在分离能耗大、成本高等问题,制约其产业化制备。为解决生物丁醇分离的技术瓶颈,近年来,应用新型分离技术实现与ABE发酵过程的耦合成为研究的热点。本文综述了生物丁醇分离技术的最新研究进展,讨论了基于汽液平衡、相转移、膜分离技术等新型分离方式的技术特点;并针对多级分离级联系统开发、面向终产物的精馏技术的新趋势、新特点进行剖析和讨论。随着分离技术的发展和进步、生物炼制工艺开发和集成,生物丁醇的制备成本可望进一步降低,提升市场竞争力。     

一种基于LWE‐CPABE的区块链数据共享方案

为应对量子计算对区块链上基于数论的隐私保护技术所带来的威胁,将区块链技术与格属性基加密算法有效融合,提出一种基于格的后量子CPABE区块链数据共享方案。将容错学习（LWE）作为方案的困难问题假设,构造一种基于格的密文策略属性基加密算法LWE-CPABE,抵御量子计算对公钥密码安全的攻击,实现数据的安全共享。设计算法参数的标准格式化交易结构,以满足LWE-CPABE算法的可追责性。在此基础上,给出交易生成与交易验证智能合约,以实现交易的自动验证与共识。功能性分析与仿真实验结果表明,该方案在算法初始化、加解密以及密钥生成的计算效率方面均优于传统的基于双线性映射理论的CPABE方案,可实现区块链上数据的高效、安全、动态共享与隐私保护,明显提高区块链数据共享安全性。     

移动云环境下高效属性基加密方案研究

目前适应移动云的属性基加密研究主要集中在单一机构,并不满足现实中的属性授权情况。针对以上问题提出了一个新的多机构属性基加密方案,该方案无中央权威,各授权机构可互不影响,分发的属性可添加;利用预计算、外包解密的方法降低用户端的计算开销;方案在随机预言模型下证明是静态安全的。实验结果表明,移动端在云环境下实施数据共享时,该方案可以减少移动设备端20%的计算开销,更符合于移动云环境实际应用场景。     

社交网络中基于CP-ABE的隐私保护属性匹配方法

针对社交网络中用户属性匹配的隐私保护问题,提出一种可保护隐私的用户属性匹配方法。该方法基于匿名属性加密技术构建,可应用于集中式属性匹配场景中。在该方法中,用户用两个属性列表分别表示自我描述和交友偏好,并通过将自我描述转化为属性密钥以及将交友偏好转化为密文访问控制策略来实现属性信息的隐藏。服务器通过判断是否能够正确解密进行匹配判定。运用该方法,服务器可以在不必了解匹配双方具体属性信息的情况下完成双向属性匹配判定。分析和实验结果表明,在保证隐私安全性的同时,该方法也具备较高的计算效率,具有较强的实用性。     

User Centric Block-Level Attribute Based Encryption in Cloud Using Blockchains

Cloud computing is a collection of distributed storage Network which can provide various services and store the data in the efficient manner. The advantages of cloud computing is its remote access where data can accessed in real time using Remote Method Innovation (RMI). The problem of data security in cloud environment is a major concern since the data can be accessed by any time by any user. Due to the lack of providing the efficient security the cloud computing they fail to achieve higher performance in providing the efficient service. To improve the performance in data security, the block chains are used for securing the data in the cloud environment. However, the traditional block chain technique are not suitable to provide efficient security to the cloud data stored in the cloud. In this paper, an efficient user centric block level Attribute Based Encryption (UCBL-ABE) scheme is presented to provide the efficient security of cloud data in cloud environment. The proposed approach performs data transaction by employing the block chain. The proposed system provides efficient privacy with access control to the user access according to the behavior of cloud user using Data Level Access Trust (DLAT). Based on DLAT, the user access has been restricted in the cloud environment. The proposed protocol is implemented in real time using Java programming language and uses IBM cloud. The implementation results justifies that the proposed system can able to provide efficient security to the data present in and cloud and also enhances the cloud performance.     

无线体域网中基于属性加密的数据访问控制方案

作为一种新的电子医疗技术,无线体域网(wireless body area networks,WBANs)将在病情监测中发挥重要作用,安全性及隐私性保护是无线体域网的重要内容.针对WBANs数据访问控制提出一种细粒度的数据访问方法,该方法采用基于属性的数据加密方法,加密者将数据访问结构作为访问策略,当解密者所具有的属性满足该结构时,即可访问该数据,否则,拒绝用户访问.分别从正确性、安全性及能量消耗三方面对方案进行分析.仿真实验结果表明,本方案相对其他方案能量消耗较小.