基于属性基加密的区块链数据共享模型

为确保当前区块链数据共享机制中的隐私保护及数据安全,受属性基加密技术能够有效实现云上数据安全共享与访问控制的启发,提出了基于属性基加密的区块链数据共享模型.该模型基于Waters所提出的密文策略属性基加密(CP-ABE)方案,首先,在私钥生成阶段,数据使用方委托多个节点参与联合计算并存储部分私钥,其他数据使用者则不可获取完整密钥,从而提升了私钥的生成效率;其次,为防止密钥滥用及算法中参数的管理,定义了一种密钥传递事务数据结构,实现了CP-ABE算法的可追责性;最后,通过构建具有链上链下协同计算与存储功能的共享链,实现了属性基加密与区块链系统的有效融合.安全性分析和实验仿真结果表明,所提模型在密钥生成计算效率和实际业务场景方面有一定的优化,满足工程应用的需要.

Model of block-chain data sharing based on ABE

Inspired by the fact that attribute-based encryption technology can effectively realize cloud data security sharing and access control, this paper proposed a block chain data sharing model based on attribute-based encryption to ensure the privacy protection and full security in the current block chain system. The model is based on the ciphertext policy attribute-based encryption(CP-ABE) scheme proposed by Waters. First of all, in the secret key generation phase, the data user entrusts multiple nodes to jointly calculate and store part of the private key, while other data users are not allowed to obtain the complete key, thus improving the efficiency of private key generation. Secondly, in order to prevent the abuse of key and the management of parameters in the algorithm, this paper defined a key transfer transaction data structure, and realized the accountability of CP-ABE algorithm. Finally, by building a shared chain with the function of collaborative computing and storage on and off the chain, it realized the effective integration of attribute-based encryption and block chain system. Security analysis and experimental simulation results show that the proposed model has certain optimization in the computational efficiency of key generation and actual business scenarios to meet the needs of engineering applications.