arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2404.04861cs.CR
收藏

面向内积的隐私保护可追踪函数加密

Privacy-Preserving Traceable Functional Encryption for Inner Product

Muyao Qiu, Jinguang Han

AI总结:

针对现有内积可追踪函数加密方案未保护用户身份隐私的问题,提出兼具隐私保护与可追踪性的PPTFE-IP方案,通过两方安全计算生成密钥,安全性规约至标准复杂度假设,兼顾隐私与问责需求。

摘要:

函数加密提出了一种公钥加密新范式,其解密操作仅会泄露加密数据的函数值。为遏制内积函数加密(FE-IP)中的密钥泄露问题并追踪用户,学界已提出一种名为内积可追踪函数加密(TFE-IP)的新原语。然而,现有TFE-IP方案未考虑用户身份的隐私保护问题。为平衡隐私性与可问责性,我们提出了面向内积的隐私保护可追踪函数加密(PPTFE-IP)概念,并给出了具体构造方案。\n我们的方案具备以下特性:(1)为防止密钥共享,用户密钥与其身份和一个向量双重绑定;(2)密钥生成中心(KGC)与用户执行两方安全计算协议生成密钥,过程中KGC无法获知用户身份的任何信息;(3)每个用户均可验证自身密钥的正确性;(4)用户可计算其密钥中嵌入的向量与密文中嵌入的向量的内积;(5)仅追踪者能够追踪密钥中嵌入的身份。我们将方案的安全性形式化规约至知名复杂度假设,并通过实现实验评估了其效率。该方案的创新点在于既保护用户隐私,又能在需要时提供可追踪性。

英文摘要:

Functional encryption introduces a new paradigm of public key encryption that decryption only reveals the function value of encrypted data. To curb key leakage issues and trace users in FE-IP, a new primitive called traceable functional encryption for inner product (TFE-IP) has been proposed. However, the privacy protection of user's identities has not been considered in the existing TFE-IP schemes. In order to balance privacy and accountability, we propose the concept of privacy-preserving traceable functional encryption for inner product (PPTFE-IP) and give a concrete construction. Our scheme provides the following features: (1) To prevent key sharing, a user's key is bound with both his/her identity and a vector; (2) The key generation center (KGC) and a user execute a two-party secure computing protocol to generate a key without the former knowing anything about the latter's identity; (3) Each user can verify the correctness of his/her key; (4) A user can calculate the inner product of the two vectors embedded in his/her key and in a ciphertext; (5) Only the tracer can trace the identity embedded in a key. The security of our scheme is formally reduced to well-known complexity assumptions, and the implementation is conducted to evaluate its efficiency. The novelty of our scheme is to protect users' privacy and provide traceability if required.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑