信息安全研究 ›› 2025, Vol. 11 ›› Issue (5): 427-.

• 学术论文 • 上一篇    下一篇

云链协同的属性代理重加密工业互联网数据共享方案

李悦1冯景瑜1王侃2张文波1   

  1. 1(西安邮电大学网络空间安全学院西安710121)
    2(空军工程大学教研保障中心西安710051)
  • 出版日期:2025-06-03 发布日期:2025-06-03
  • 通讯作者: 李悦 硕士研究生.主要研究方向为工业互联网安全、密码学应用. 1360453287@qq.com
  • 作者简介:李悦 硕士研究生.主要研究方向为工业互联网安全、密码学应用. 1360453287@qq.com 冯景瑜 博士,教授.主要研究方向为工业互联网安全、零信任内网安全. fengjy@xupt.edu.cn 王侃 硕士,工程师.主要研究方向为信息安全. 124543383@qq.com 张文波 博士,副教授.主要研究方向为工业互联网安全、数据安全. 51717551@qq.com

Industrial Internet Data Sharing Scheme with Attributebased #br# Proxy Reencryption in Cloudchain Collaboration#br#

Li Yue1, Feng Jingyu1, Wang Kan2, and Zhang Wenbo1   

  1. 1(School of Cyberspace Security, Xi’an University of Posts and Telecommunications, Xi’an 710121)
    2(Teaching and Research Support Center, Air Force Engineering University, Xi’an 710051)
  • Online:2025-06-03 Published:2025-06-03

摘要: 工业互联网是新一代信息技术与工业系统全方位深度融合的应用生态,通过数据共享可以实现对工业领域各类资源的统筹管理和调配.针对工业互联网数据共享过程中存在的隐私泄露问题,提出一种云链协同的属性代理重加密工业互联网数据共享方案,云中存储海量工业数据密文,链上解决数据安全共享过程中的计算与元数据密文存储问题.结合无证书公钥密码体制,构造可避免私钥托管的密文策略属性基加密的密钥生成算法.设计信任评估共识算法,在区块链网络中选取可信度较高的节点作为代理,解决传统代理重加密中的代理半可信问题.安全分析表明该方案满足关键字安全性和抗共谋攻击性.性能与仿真对比实验结果表明,该方案具有更优的功能与更高的效率,对工业互联网数据共享具有适用性.

关键词: 云存储, 区块链, 工业互联网, 属性代理重加密, 数据安全共享

Abstract: The industrial Internet is an application ecology of new generation information technology and industrial system in an allround and deep integration. Through data sharing, it can realize the overall management and allocation of various resources in the industrial field. Aiming at the problem of privacy leakage in the process of industrial Internet data sharing, this paper proposes a cloudchain collaborative attributebased proxy reencryption industrial Internet data sharing scheme, which stores massive industrial data ciphertext in the cloud, and solves the problem of computing and metadata ciphertext storage in the process of data security sharing on the blockchain. Construct a key generation algorithm that can avoid private key escrow by combining certificateless public key cryptography with ciphertext policy attributebased encryption. Design a trust evaluation consensus algorithm to select nodes with high credibility as proxies in blockchain networks, solving the semitrust problem of traditional proxy reencryption. The security analysis shows that the proposed scheme satisfies keyword security and resistance to collusion attacks. The performance and simulation results show that the scheme in this paper has better functions and higher efficiency, and applicability for industrial Internet data sharing.

Key words: cloud storage, blockchain, industrial Internet, attributebased proxy reencryption, data security sharing

中图分类号: