基于属性密码体制的区块链安全技术研究进展

doi:10.12263/DZXB.20191375

电子学报 ›› 2021, Vol. 49 ›› Issue (1): 192-200.DOI: 10.12263/DZXB.20191375

基于属性密码体制的区块链安全技术研究进展

陈露^1,2,3, 相峰⁴, 孙知信^1,2,3

1. 南京邮电大学江苏省邮政大数据技术与应用工程研究中心, 江苏南京 210003;
2. 南京邮电大学国家邮政局邮政行业技术研发中心(物联网技术), 江苏南京 210003;
3. 南京邮电大学宽带无线通信技术教育部工程研究中心, 江苏南京 210003;
4. 物流信息互通共享技术及应用国家工程实验室, 上海 200000

收稿日期:2019-12-13 修回日期:2020-07-01 出版日期:2021-01-25
- 通讯作者:
- 孙知信
- 作者简介:
- 陈露女,1995年3月出生于江苏南京.博士研究生,主要研究方向为网络安全技术,区块链技术;相峰男,1967年4月出生于山东龙口.硕士,物流信息互通共享技术及应用国家工程实验室主任,主要研究方向为物流工程与企业管理,区块链技术.
- 基金资助:
- 国家自然科学基金 (No.61672299，No.61972208）; 江苏省研究生科研创新计划 (No.SJKY19-0770）

A Survey of Blockchain Security Technologies Based on Attribute-based Cryptography

CHEN Lu^1,2,3, XIANG Feng⁴, SUN Zhi-xin^1,2,3

1. Engineering Research Center of Post Big Data Technology and Application of Jiangsu Province, Nanjing University of Posts and Telecommunications, Nanjing, Jiangsu 210003, China;
2. Research and Development Center of Post Industry Technology of the State Posts Bureau(Internet of Things Technology), Nanjing University of Posts and Telecommunications, Nanjing, Jiangsu 210003, China;
3. Engineering Research Center of Broadband Wireless Communication Technology of the Ministry of Education, Nanjing University of Posts and Telecommunications, Nanjing, Jiangsu 210003, China;
4. National Engineering Laboratory for Logistics Information Technology, Shanghai 200000, China

Received:2019-12-13 Revised:2020-07-01 Online:2021-01-25 Published:2021-01-25
- Corresponding author:
- SUN Zhi-xin
- Supported by:
- National Natural Science Foundation of China (No.61672299, No.61972208); Postgraduate Research Innovation Project of Jiangsu Province (No.SJKY19-0770)

摘要/Abstract

摘要： 区块链是一种集合了分布式存储、点对点传输、共识机制、密码学算法和智能合约等关键技术的分布式账本，具有去中心化、不可篡改、透明化等特性.近年来区块链技术的安全性问题逐渐显露，阻碍了区块链应用的发展.本文介绍了区块链的基本概念与安全模型，分析了区块链的安全性问题；然后，基于属性密码体制，从访问控制、密钥管理、数据隐私保护这三个方面分析了区块链安全技术的各类研究，论述了主要的解决方案的特点；最后，总结了基于属性密码体制的区块链安全技术研究进展，并对未来的研究工作进行了讨论.

关键词: 区块链安全, 密码学, 属性加密, 属性签名

Abstract: Blockchain is a distributed ledger that integrates key technologies such as distributed storage, peer-to-peer transmission, consensus mechanism, cryptographic algorithm and smart contract. It has the characteristics of decentralization, non-tampering, transparency and so on. In recent years, security problems of blockchain have gradually emerged, hindering the development of blockchain applications. This paper introduces the basic concept and security model of the blockchain, and analyzes the security problems of the blockchain. Then, based on the attribute-based cryptography, the various researches of the blockchain security technology are analyzed from the three aspects of access control, key management, and data privacy protection, and the characteristics of the main solutions are discussed. Finally, we summarize the research progress of the blockchain security technology based on the attribute-based cryptography, and discuss the future research work.

Key words: blockchain security, cryptography, attribute-based encryption, attribute-based signature

中图分类号:

TP309

陈露, 相峰, 孙知信. 基于属性密码体制的区块链安全技术研究进展[J]. 电子学报, 2021, 49(1): 192-200.

CHEN Lu, XIANG Feng, SUN Zhi-xin . A Survey of Blockchain Security Technologies Based on Attribute-based Cryptography[J]. Acta Electronica Sinica, 2021, 49(1): 192-200.

参考文献

[1] Nakamoto S.Bitcoin:a peer-to-peer electronic cash system[EB/OL].http://bitcoin.org/bitcoin.pdf,2009.
[2] 袁勇,王飞跃.区块链技术发展现状与展望[J].自动化学报,2016,42(04):481-494. Yuan Yong,Wang Feiyue.Blockchain:the state of the art and future trends[J].IEEE/CAA Journal of Automatica Sinica,2016,42(04):481-494.(in Chinese)
[3] 邵奇峰,金澈清,张召,等.区块链技术:架构及进展[J].计算机学报,2018,41(05):969-988. Shao Qifeng,Jin Cheqing,Zhang Zhao,et al.Blockchain:architecture and research progress[J].Chinese Journal of Computers,2018,41(05):969-988.(in Chinese)
[4] Lamport L,et al.The Byzantine generals problem[J].ACM Trans on Programming Languages and Systems,1982,4(3):382-401.
[5] Zheng ZB,et al.An overview of blockchain technology:architecture,consensus,and future trends[A].IEEE Int'l Congress on Big Data[C].Piscataway:IEEE,2017.557-564.
[6] Hinz J,Taylor P.A Note on Optimal Double Spending Attacks[M].Switzerland:Springer Cham,2019.2:545-551.
[7] Tasatanattakool P,Techapanupreeda C.Blockchain:challenges and applications[A].2018 International Conference on Information Networking (ICOIN)[C].Piscataway:IEEE,2018.473-475.
[8] Joshi AP,Han M,Wang Y.A survey on security and privacy issues of blockchain technology[J].Mathematical Foundations of Computing,2018,1(2):121-147.
[9] Takemoto Y,Knight S.Mt.Gox files for bankruptcy,hit with lawsuit[EB/OL].https://www.reuters.com/article/us-[JP1]bitcoin-mtgox-bankruptcy-idUSBREA1R0FX20140228,2018.
[10] Pang L J,Yang J,Jiang Z T.A survey of research progress and development tendency of attribute-based encryption[J].The Scientific World Journal,2014,2014:193426.
[11] Yan XX,Meng H.Ciphertext policy attribute-based encryption scheme supporting direct revocation[J].Journal on Communications,2016,37(5):44-50.
[12] Zhang M Q,Du WD,et al.A full secure KP-ABE scheme in the standard model[J].Journal of Computer Research and Development,2015,52(8):1893-1901.
[13] Zhu Y,Qin Y,Gan G H,Yang S.TBAC:Transaction-based access control on blockchain for resource sharingwith cryptographically decentralized authorization[A].IEEE International Conference on Computer Software and Applications[C].Piscataway:IEEE,2018.535-544.
[14] Sun Y,Zhang R,Wang X,et al.A decentralizing attribute-based signature for healthcareblockchain[A].Int'l Conf on Computer Communication and Networks[C].Piscataway:IEEE,2018.1-9.
[15] Wang H,Song Y J.Secure cloud-based EHR system using attribute-based cryptography and blockchain[J].Journal of Medical Systems,2018,42(8):152-161.
[16] ?ahan S,Ekici AF,Bahtiyar S.A multi-factor authentication framework for secure access to blockchain[A].Int'l Conf on Computer and Technology Applications[C].New York:ACM,2019.160-164.
[17] Ye CC,Li GQ,et al.Security detection model of blockchain[J].Journal of Software,2018,29(5):1348-1359.
[18] Gervais A,Karame G,et al.On the security and performance of proof of work blockchains[A].ACM SIGSAC Conference[C].New York:ACM,2016.3-16.
[19] Kokoris-Kogias E,Jovanovic P,et al.Enhancing bitcoin security and performance with strong consistency via collective signing[J].Applied Mathematical Modelling,2016,37(8):5723-5742.
[20] Kiayias A,Russell A,et al.Ouroboros:A provably secure proof-of-stake blockchain protocol[A].Proc of Annual International Cryptology Conference[C].Switzerland:Springer,Cham,2017.357-388.
[21] LiN,Yan Z,et al.Securing communication data in pervasive social networking based on trust with KP-ABE[J].ACM Transactions on Cyber-Physical Systems,2018,3(1):1-23.
[22] Reshma V,Gladwin SJ,et al.Pairing-free CP-ABE based cryptography combined with steganography for multimedia applications[A].Int'l Conf on Communication and Signal Processing[C].Piscataway:IEEE,2019.0501-0505.
[23] Yang P,Cao Z,Dong X.Fuzzy identity based signature with applications to biometric authentication[J].Computers & Electrical Engineering,2011,37(4):532-540.
[24] Sánchez YKR,Demurjian SA,et al.Attaining role-based,mandatory,and discretionary access control for services by intercepting api calls in mobile systems[A].Web Information Systems and Technologies[C].Berlin:Springer,2018.322:221-248.
[25] Taubmann B,Rakotondravony N,et al.Cloud Phylactor:harnessing mandatory access control for virtual machine introspection in cloud data centers[A].IEEE Trustcom/BigDataSE/ISPA[C].Piscataway:IEEE,2016.957-964.
[26] Power DJ,Slaymaker M,et al.On formalizing and normalizing role-based access control systems[J].Computer Journal,2018,52(3):305-325.
[27] Jha S,Sural S,Atluri V,et al.Security analysis of ABAC under an administrative model[J].IET Information Security,2019,13(2):96-103.
[28] Ouaddah A,Abou Elkalam A,et al.FairAccess:a new blockchain-based access control framework for the internet of things[J].Security & Communication Networks,2016,9(18):5943-5964.
[29] Cruz JP,Kaji Y,Yanai N.RBAC-SC:role-based access control using smart contract[J].IEEE Access,2018,6:12240-12251.
[30] Zhu Y,Qin Y,Zhou ZY,et al.Digital asset management with distributed permission over blockchain and attribute-based access control[A].IEEE Int'l Conf on Services Computing[C].Piscataway:IEEE,2018.193-200.
[31] 余波,台宪青,马治杰.云计算环境下基于属性和信任的RBAC模型研究[J].计算机工程与应用,2020,(9):84-92. Yu Bo,Tai Xianqing,Ma Zhijie.The study on attribute and trust-based RBAC model in cloud computing[J].Computer Engineering and Applications,2020,(9):84-92.(in Chinese)
[32] Jemel M,Serhrouchni A.Decentralized access control mechanism with temporal dimension based on blockchain[A].IEEE 14th Int'l Conf on E-business Engineering (ICEBE)[C].Piscataway:IEEE,2017.177-182.
[33] 王秀利,江晓舟,李洋.应用区块链的数据访问控制与共享模型[J].软件学报,2019,30(6):1661-1669. Wang Xiuli,Jiang Xiaozhou,Li Yang.Model for data access control and sharing based on blockchain[J].Journal of Software,2019,30(6):1661-1669.(in Chinese)
[34] Xiao M,Hu X.Multi-authority attribute-based encryption access control scheme in wireless body area network[A].International Conference on Information Systems Engineering[C].Piscataway:IEEE,2019.39-45.
[35] Li G,Hiroyuki S.A privacy-preserving and fully decentralized storage and sharing system onblockchain[A].IEEE 43rd Annual Computer Software and Applications Conf[C].Piscataway:IEEE,2019.694-699.
[36] Sarmadullah K,Rafiullah K.Multiple authorities attribute-based verification mechanism for blockchain mircogrid transactions[J].Energies,2018,11(5):1154.
[37] Dai FF,Shi Y,Meng N,et al.From bitcoin to cyber-security:a comparative study of blockchain application and security issues[A].4th Int'l Conf on Systems and Informatics[C].Piscataway:IEEE,2017.975-979.
[38] Eskandari S,Barrera D,et al.A first look at the usability of bitcoin key management[A].NDSS Symposium[C].Internet Society,2015.1-10.
[39] Lin Q,Yan HY,Huang ZA,et al.An ID-based linearly homomorphic signature scheme and its application in blockchain[J].IEEE Access,2018,6:20632-20640.
[40] Albakri A,Harn L,Maddumala M.Polynomial-based lightweight key management in a permissioned blockchain[A].IEEE Conference on Communications and Network Security[C].Piscataway:IEEE,2019.1-9.
[41] Wu A X,Zhang Y H,et al.Efficient and privacy-preserving traceable attribute-based encryption in blockchain[J].Annals of Telecommunications,2019,74(7-8):404-411.
[42] Bramm G,Gall M,et al.BDABE-blockchain-based distributed attribute based encryption[A].International Conference on Security and Cryptography[C].Piscataway:IEEE,2018.265-276.
[43] He Q S,Xu Y,et al.A privacy-preserving internet of things device management scheme based on blockchain[J].International Journal of Distributed Sensor Networks,2018,14(11):1-12.
[44] Guo R,Shi H X,Zheng D,et al.Flexible and efficient blockchain-based abe scheme with multi-authority for medical on demand in telemedicine system[J].IEEE Access,2019,7:88012-88025.
[45] Sharath Y J,Bangera K,et al.Privacy preserving in blockchain based on partial homomorphic encryption system for AI applications[A].IEEE 25th International Conference on High Performance Computing Workshops[C].Piscataway:IEEE,2018.81-85.
[46] 田道坤,彭亚雄.在区块链中基于混合算法的数字签名技术[J].电子科技,2018,31(7):23-27. Tian Daokun,Peng Yaxiong.Digital signature technology based on hybrid algorithm in blockchain[J].Electronic Sci&Tech,2018,31(7):23-27.(in Chinese)
[47] Kosba A,Miller A,Shi E,et al.Hawk:The blockchain model of cryptography and privacy-preserving smart contracts[A].IEEE Symposium on Security and Privacy[C].Piscataway:IEEE,2016.839-858.
[48] Li L,Liu J Q,Cheng L C,et al.CreditCoin:A privacy-preserving blockchain-based incentive announcement network for communications of smart vehicles[J].IEEE Trans on Intelligent Transportation Systems,2018,19(7):2204-2220.
[49] Noether Shen,Mackenzie Adam,et al.Ring Confidential Transactions[OL].DOI:10.5195/LEDGER.2016.34,2019.
[50] Tahir S,Rajarajan M.Privacy-preserving searchable encryption framework for permissioned blockchain networks[A].IEEE International Conference on iThings and IEEEGreenCom and IEEE CPSCom and IEEE SmartData[C].Piscataway:IEEE,2018.1628-1633.
[51] Lewko A B,Waters B.Decentralizing attribute-based encryption[A].The 30th Annual International Conference Theory and Applications of Cryptographic Techniques:advances in cryptology[C].New York:ACM,2011.568-588.
[52] Yuan C,Xu M X,et al.Blockchain with accountable CP-ABE:How to effectively protect the electronic documents[A].IEEE International Conference on Parallel and Distributed Systems[C].Piscataway:IEEE,2017.800-803.
[53] Rahulamathavn Y,W Phan RC,et al.Privacy-preserving blockchain based IOT ecosystem using attribute-based encryption[A].IEEE International Conference on Advanced Networks and Telecommunications Systems(ANTS)[C].Piscataway:IEEE,2017.1-6.
[54] Huang D J,Chung C J,et al.Building private blockchains over public blockchains (PoP):an attribute-based access control approach[A].34th ACM/SIGAPP Symposium[C].New York:ACM,2019.355-363.
[55] Sun Y,Zhang R,et al.A decentralizing attribute-based signature for healthcare blockchain[A].International Conference on Computer Communication and Networks[C].Piscataway:IEEE,2018.1-9.
[56] Zhang YR,He D,Choo KKR.BaDS:blockchain-based architecture for data sharing with ABS and CP-ABE in IOT[J].Wireless Communications and Mobile Computing,2018,(2018):1-9.
[57] Zhou T,Li X,Zhao H.DLattice:A permission-less blockchain based on dpos-ba-dag consensus for data tokenization[J].IEEE Access,2019,(99):1-1.
[58] 李芳,李卓然,等.区块链跨链技术进展研究[J].软件学报,2019,30(6):1649-1660. Li Fang,Li Zhuoran,et al.Research on the progress in cross-chain technology of blockchains[J].Journal of Software,2019,30(6):1649-1660.(in Chinese)
[59] Zheng QH,Li Y,Chen P,Dong XH.An innovative IPFS-based storage model for blockchain[A].IEEE/WIC/ACM International Conference on Web Intelligence[C].Piscataway:IEEE,2018.704-708.
[60] 窦家维,王文丽,刘旭红,等.有理区间的安全多方计算与应用[J].电子学报,2018,46(9):2057-2062. Dou Jiawei,Wang Wenli,Liu Xuhong,et al.Secure multiparty computation of rational interval and its applications[J].Acta Electronica Sinica,2018,46(9):2057-2062.(in Chinese)

基于属性密码体制的区块链安全技术研究进展

A Survey of Blockchain Security Technologies Based on Attribute-based Cryptography

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

[1]	赵开强, 康萍, 刘彬, 郭真, 冯朝胜, 卿昱. 支持云代理重加密的CP-ABE方案[J]. 电子学报, 2023, 51(3): 728-735.
[2]	赵璐, 刘春红, 杜蛟, 曹天庆. Z₄上两类具有最优自相关四元序列的线性复杂度研究[J]. 电子学报, 2021, 49(4): 631-636.
[3]	窦家维, 王颖囡, 葛雪. 区间关系保密计算若干问题研究[J]. 电子学报, 2021, 49(1): 50-57.
[4]	杨贺昆, 冯朝胜, 晋云霞, 王蔺, 罗王平, 邓红辉. 支持可验证加解密外包的CP-ABE方案[J]. 电子学报, 2020, 48(8): 1545-1551.
[5]	戚珉, 陈明. 标准模型下基于身份的混淆乐观公平交换方案[J]. 电子学报, 2020, 48(8): 1516-1527.
[6]	杨启良, 周彦伟, 杨坤伟, 王涛. 标准模型下可公开验证的匿名IBE方案的安全性分析[J]. 电子学报, 2020, 48(2): 291-295.
[7]	李航, 冯朝胜, 刘帅南, 刘彬, 赵开强. 支持离线/在线加密及可验证外包解密的CP-WABE方案[J]. 电子学报, 2020, 48(11): 2146-2153.
[8]	魏铎, 高海英. 一种支持算术张成程序的密文策略属性加密方案[J]. 电子学报, 2020, 48(10): 1993-2002.
[9]	李顺东, 杜润萌, 杨颜璟, 魏琼. 有理数相等的保密判定[J]. 电子学报, 2020, 48(10): 1933-1937.
[10]	窦家维, 陈明艳. 多重集的保密计算及应用[J]. 电子学报, 2020, 48(1): 204-208.
[11]	杨小东, 王美丁, 裴喜祯, 李雨潼, 陈春霖, 麻婷春. 一种标准模型下无证书签名方案的安全性分析与改进[J]. 电子学报, 2019, 47(9): 1972-1978.
[12]	杜蛟, 刘春红, 张恩, 尚玉婧, 董乐. 基于拉丁方的GF(p)上q元旋转对称弹性函数的新构造[J]. 电子学报, 2018, 46(9): 2173-2180.
[13]	窦家维, 王文丽, 刘旭红, 李顺东. 有理区间的安全多方计算与应用[J]. 电子学报, 2018, 46(9): 2057-2062.
[14]	董丽华, 曾勇, 王春红, 胡予濮. LFCSR:基于FCSR的新密码学部件[J]. 电子学报, 2018, 46(8): 1924-1930.
[15]	李顺东, 杨晓莉, 左祥建, 周素芳, 亢佳, 刘新. 保护私有信息的图形相似判定[J]. 电子学报, 2017, 45(9): 2184-2189.