细粒度的属性基内积函数加密方案

Fine-grained attribute-based inner product functional encryption schemes

摘要

随着数据量的迅速增长,保护数据隐私的重要性变得更加显著。在许多数据处理应用中,如机器学习、图像处理和推荐系统,向量内积计算是一项关键操作。然而,传统的向量内积计算方法可能会泄露向量的具体数据,进而威胁到用户的隐私。为了解决这一问题,Abdalla等提出了内积函数加密方案(Inner product functional encryption,IPFE),该方案在保护向量数据隐私的同时,允许授权用户计算向量内积。然而,原始IPFE方案无法识别计算内积的用户身份。为此,研究者们提出了基于身份的IPFE方案,尽管这些方案增强了隐私保护,但在访问控制的细粒度方面仍有欠缺。本文引入属性加密(Attribute-based encryption,ABE)与IPFE相结合的方法,提出2种新的内积函数加密方案:基于KP-ABE的内积函数加密方案(KP-ABE-IPFE)和基于CP-ABE的内积函数加密方案(CP-ABE-IPFE)。KP-ABE-IPFE通过属性集合定义用户身份,并将访问策略与密钥关联,而CP-ABE-IPFE则将访问策略与密文关联。通过详细的性能分析和比较,验证了这2种方案在细粒度访问控制和隐私保护方面的有效性。所提出的方案基于标准模型构建,避免了随机谕言机模型的理想化假设,增强了方案的安全性和实用性。

Abstract

With the rapid growth of data volume,protecting data privacy has become increasingly important.In many data processing applications,such as machine learning,image processing,and recommendation systems,inner product computation of vectors is a crucial operation.However,traditional methods for inner product computation may reveal specific vector data,thereby threatening users privacy.To address this issue,Abdalla et al.proposed the inner product functional encryption (IPFE) scheme,which allows authorized users to compute inner products while protecting vector data privacy.However,the original IPFE scheme cannot identify the user who computes the inner product.To enhance privacy protection,researchers have proposed identity-based IPFE schemes,yet these schemes still lack fine-grained access control.In this paper,we introduce a method that combines Attribute-Based Encryption (ABE) with IPFE and propose two new inner product functional encryption schemes:key-policy ABE-IPFE(KP-ABE-IPFE) and ciphertext-policy ABE-IPFE(CP-ABE-IPFE).KP-ABE-IPFE defines users identities through attribute sets and associates access policies with keys,while CP-ABE-IPFE associates access policies with ciphertexts.Through detailed performance analysis and comparison,we demonstrate the effectiveness of these schemes in achieving fine-grained access control and privacy protection.The proposed schemes are constructed based on the standard model,avoiding the idealized assumptions of the random oracle model,thereby enhancing the security and practicality of the schemes.

关键词

密码学 / 属性加密 / 内积函数加密 / 安全性归约

Key words

cryptography / attribute-based encryption / inner product function encryption / security reduction

[1] 王涛,邓伦治.一个基于身份的具有敏感信息隐藏数据完整性审计方案[J].贵州师范大学学报(自然科学版),2023,41(2):91-104.
[2] 冯帅,邓伦治.基于身份的隐私保护数据审计方案[J].贵州师范大学学报(自然科学版),2023,41(2):105-112.
[3] 尚凤军,邓鑫鑫.融合区块链技术的隐私保护车联网数据共享方案[J].重庆邮电大学学报(自然科学版),2025,37(2):155-164.
[4] Greener J G,Kandathil S M,Moffat L,et al.A guide to machine learning for biologists[J].Nature Reviews Molecular Cell Biology,2022,23(1):40-55.
[5] Choi J,Choi H,Hwang J,et al.Graph neural controlled differential equations for traffic forecasting[C]//Thirty-Sixth AAAI Conference on Artificial Intelligence.Washington,DC:AAAI Press,2022:6367-6374.
[6] Ko H,Lee S,Park Y,et al.A survey of recommendation systems:Recommendation models,techniques,and application fields[J].Electronics,2022,11(1):141.
[7] Abdalla M,Bourse F,De Caro A,et al.Simple functional encryption schemes for inner products[EB/OL].[2025-04-03],IACR,2015.https://eprint.iacr.org/2015/017.
[8] 邓宇乔,宋歌,杨波,等.基于身份的可验证密钥的公钥内积函数加密算法[J].计算机学报,2021,44(1):209-221.
[9] Song Ge,Deng Yuqiao,Huang Qiong,et al.Hierarchical identity-based inner product functional encryption[J].Information Sciences,2021,573:332-344.
[10] Devevey J,Libert B,Nguyen K,et al.Non-interactive CCA2-secure threshold cryptosystems:achieving adaptive security in the standard model without pairings[C]//Public-Key Cryptography-PKC 2021:24th IACR International Conference on Practice and Theory of Public Key Cryptography,Virtual Event,May 10-13,2021,Proceedings,Part I.Cham:Springer,2021:659-690.
[11] Koblitz N,Menezes A J.The random oracle model:a twenty-year retrospective[J].Designs,Codes and Cryptography,2015,77:587-610.
[12] Sahai A,Waters B.Fuzzy identity-based encryption[C]//Advances in Cryptology-EUROCRYPT 2005:24th Annual International Conference on the Theory and Applications of Cryptographic Techniques,Aarhus,Denmark,May 22-26,2005.Proceedings 24.Cham:Springer,2005:457-473.
[13] Li Hang,Yu Keping,Liu Bin,et al.An efficient ciphertext-policy weighted attribute-based encryption for the internet of health things[J].IEEE Journal of Biomedical and Health Informatics,2021,26(5):1949-1960.
[14] Ge Chunpeng,Susilo W,Baek J,et al.Revocable attribute-based encryption with data integrity in clouds[J].IEEE Transactions on Dependable and Secure Computing,2021,19(5):2864-2872.
[15] Zeng Peng,Zhang Zhiting,Lu Rongxing,et al.Efficient policy-hiding and large universe attribute-based encryption with public traceability for internet of medical things[J].IEEE Internet of Things Journal,2021,8(13):10963-10972.
[16] Hohenberger S,Lu G,Waters B,et al.Registered attribute-based encryption[C]//Advances in Cryptology-EUROCRYPT 2023:42nd Annual International Conference on the Theory and Applications of Cryptographic Techniques,Lyon,France,April 23-27,2023,Proceedings,Part Ⅲ.Cham:Springer,2023:511-542.
[17] Chinnasamy P,Deepalakshmi P,Dutta A K,et al.Ciphertext-policy attribute-based encryption for cloud storage:toward data privacy and authentication in AI-enabled IoT system[J].Mathematics,2021,10(1):68.
[18] Abdalla M,Benhamouda F,Gay R.From single-input to multi-client inner-product functional encryption[C]//Advances in Cryptology-ASIACRYPT 2019:25th International Conference on the Theory and Application of Cryptology and Information Security,Kobe,Japan,December 8-12,2019,Proceedings,Part III 25.Cham:Springer,2019:552-582.
[19] Brakerski Z,Segev G.Function-private functional encryption in the private-key setting[J].Journal of Cryptology,2018,31:202-225.
[20] Abdalla M,Benhamouda F,Kohlweiss M,et al.Decentralizing inner-product functional encryption[C]//Public-Key Cryptography-PKC 2019:22nd IACR International Conference on Practice and Theory of Public-Key Cryptography,Beijing,China,April 14-17,2019,Proceedings,Part Ⅱ 22.Cham:Springer,2019:128-157.
[21] Agrawal S,Goyal R,Tomida J.Multi-party functional encryption[C]//Theory of Cryptography-19th International Conference-TCC 2021.Cham:Springer,2021:224-255.
[22] Abdalla M,Catalano D,Gay R,et al.Inner-product functional encryption with fine-grained access control[C]//Advances in Cryptology-ASIACRYPT 2020.Cham:Springer,2020:467-497.
[23] Datta P,Pal T.Decentralized multi-authority attribute-based inner-product FE:large universe and unbounded[C]//Public-Key Cryptography-PKC 2023.Cham:Springer,2023:587-621.
[24] Yang Haoxuan,Peng Changgen.CP-IPFE:ciphertext-policy based inner product functional encryption[J].IEEE Transactions on Information Forensics and Security,2024,19:5419-5433.
[25] Nguyen K,Phan D H,Pointcheval D.Multi-client functional encryption with fine-grained access control[C]//Advances in Cryptology-ASIACRYPT 2022.Cham:Springer,2022:95-125.
[26] Waters B.Ciphertext-policy attribute-based encryption:an expressive,efficient,and provably secure realization[C]//Public Key Cryptography-PKC 2011:14th International Conference on Practice and Theory in Public Key Cryptography,Taormina,Italy,March 6-9,2011.Proceedings 14.Cham:Springer,2011:53-70.

基金资助

国家自然科学基金(62272124);广东省哲学社会科学规划项目(GD24XTS02);广东省教育科学规划项目(2023GXJK295)