arXivDaily arXiv每日学术速递 周一至周五更新
北美退伍军人节(Veterans Day),12 日无更新
arXiv 2202.04696cs.ITmath.IT
收藏

基于属性的分布式私有访问控制

Distributed Attribute-based Private Access Control

Amir Masoud Jafarpisheh, Mahtab Mirmohseni, Mohammad Ali Maddah-Ali

摘要:

在基于属性的访问控制中,具有某些验证属性的用户将获得对某些特定数据的访问权限。考虑到用户属性的隐私性,研究了多个权威机构的分布式基于属性的私有访问控制(DAPAC)问题,其中每个权威机构只学习和验证其中一个属性。为了研究它的基本限制,我们引入了一个信息理论DAPAC框架,与$N \in \mathbb{N}$,$N\geq 2$,复制的非串通服务器(当局)和一些用户。每个用户都有维度$N$的属性向量$\mathbf{v^*}=(v_1^*, ..., v_N^*)$,并且有资格检索所有服务器中可用的消息$W^{\mathbf{v}^*}$。每个服务器$n\in [N]$只能观察和验证用户的$n$属性。作为响应,它将其数据的函数发送给用户。系统必须满足以下条件:(1)正确性:具有属性向量$\mathbf{v^*}$的用户能够从服务器的响应中检索他想要的消息$W^{\mathbf{v}^*}$,(2)数据保密性:用户将不会获悉关于其他消息的任何信息,(3)属性保密性:每个服务器$n$除了用户的属性$n$之外不会获悉任何信息。DAPAC的容量被定义为文件大小和响应的聚合大小的比率,在所有可行的方案中最大化。我们得到了一个下界的能力,这个问题,提出了一个可实现的算法与速率$\frac{1}{2K}$,其中$K$是每个属性的字母表的大小。

英文摘要:

In attribute-based access control, users with certain verified attributes will gain access to some particular data. Concerning with privacy of the users' attributes, we study the problem of distributed attribute-based private access control (DAPAC) with multiple authorities, where each authority will learn and verify only one of the attributes. To investigate its fundamental limits, we introduce an information theoretic DAPAC framework, with $N \in \mathbb{N}$, $N\geq 2$, replicated non-colluding servers (authorities) and some users. Each user has an attribute vector $\mathbf{v^*}=(v_1^*, ..., v_N^*)$ of dimension $N$ and is eligible to retrieve a message $W^{\mathbf{v}^*}$, available in all servers. Each server $n\in [N]$ is able to only observe and verify the $n$'th attribute of a user. In response, it sends a function of its data to the user. The system must satisfy the following conditions: (1) Correctness: the user with attribute vector $\mathbf{v^*}$ is able to retrieve his intended message $W^{\mathbf{v}^*}$ from the servers' response, (2) Data Secrecy: the user will not learn anything about the other messages, (3) Attribute Privacy: each Server~$n$ learns nothing beyond attribute $n$ of the user. The capacity of the DAPAC is defined as the ratio of the file size and the aggregated size of the responses, maximized over all feasible schemes. We obtain a lower bound on the capacity of this problem by proposing an achievable algorithm with rate $\frac{1}{2K}$, where $K$ is the size of the alphabet of each attribute.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑