arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 1602.03642cs.CR
收藏

访问控制加密:用密码学加强信息流

Access Control Encryption: Enforcing Information Flow with Cryptography

Ivan Damgård, Helene Haagh, Claudio Orlandi

摘要:

我们开始研究访问控制加密(ACE),一种新的加密原语,允许细粒度的访问控制,通过给予不同的权利,不同的用户不仅在哪些消息,他们被允许接收,但也哪些消息,他们被允许发送。用于信息流的安全策略的经典示例是众所周知的Bell-Lapadula [BL 73]或Biba [Bib 75]模型:简而言之,Bell-Lapadula模型为系统中的每个用户分配角色(例如,公开的、秘密的和绝密的)。用户的角色指定允许用户接收哪些消息(即,禁止读取规则,意味着具有公共许可的用户不应该能够读取标记为秘密或最高秘密的消息)以及允许用户发送哪些消息(即,禁止写入规则,这意味着具有绝密权限的用户不应该能够写入标记为秘密或公开的消息)。据我们所知,没有现有的密码原语允许甚至这种简单形式的访问控制,因为没有现有的密码原语对应该能够加密的消息类型施加任何限制。我们的贡献是:- 引入并正式定义访问控制加密(ACE); -基于经典数论假设(DDH,Paillier),具有在角色数量上的复杂性线性的ACE的构造; -基于密码混淆的最近结果,具有在角色数量上的复杂性多对数的ACE的构造;

英文摘要:

We initiate the study of Access Control Encryption (ACE), a novel cryptographic primitive that allows fine-grained access control, by giving different rights to different users not only in terms of which messages they are allowed to receive, but also which messages they are allowed to send. Classical examples of security policies for information flow are the well known Bell-Lapadula [BL73] or Biba [Bib75] model: in a nutshell, the Bell-Lapadula model assigns roles to every user in the system (e.g., public, secret and top-secret). A users' role specifies which messages the user is allowed to receive (i.e., the no read-up rule, meaning that users with public clearance should not be able to read messages marked as secret or top-secret) but also which messages the user is allowed to send (i.e., the no write-down rule, meaning that a user with top-secret clearance should not be able to write messages marked as secret or public). To the best of our knowledge, no existing cryptographic primitive allows for even this simple form of access control, since no existing cryptographic primitive enforces any restriction on what kind of messages one should be able to encrypt. Our contributions are: - Introducing and formally defining access control encryption (ACE); - A construction of ACE with complexity linear in the number of the roles based on classic number theoretic assumptions (DDH, Paillier); - A construction of ACE with complexity polylogarithmic in the number of roles based on recent results on cryptographic obfuscation;

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑