信息安全研究 ›› 2025, Vol. 11 ›› Issue (1): 81-.

• 技术应用 • 上一篇    下一篇

融合代理重加密和零知识证明的USB Key联盟链追溯系统

张磊1万昕元1肖超恩1王建新1邓昊东2郑玉崝1   

  1. 1(北京电子科技学院电子与通信工程系北京100070)
    2(北京电子科技学院网络空间安全系北京100070)
  • 出版日期:2025-01-24 发布日期:2025-02-20
  • 通讯作者: 万昕元 硕士研究生.主要研究方向为电子信息工程、EDA技术、信息安全. 15995256688@163.com
  • 作者简介:张磊 博士,正高级工程师.主要研究方向为信息安全. zhanglei@besti.edu.cn 万昕元 硕士研究生.主要研究方向为电子信息工程、EDA技术、信息安全. 15995256688@163.com 肖超恩 博士,讲师.主要研究方向为智能软件和分布式计算. xce@besti.edu.cn 王建新 博士,副教授.主要研究方向为电子信息工程. wangjianxin@besti.edu.cn 邓昊东 硕士研究生.主要研究方向为网络空间安全、信息安全. 596920314@qq.com 郑玉崝 硕士研究生.主要研究方向为电子信息工程、EDA技术、信息安全. 1002150413@qq.com

An Alliance Chain Traceability System for USB Key Based on #br# Proxy Reencryption and Zeroknowledge Proof#br#

Zhang Lei1, Wan Xinyuan1, Xiao Chaoen1, Wang Jianxin1, Deng Haodong2, and Zheng Yuzheng1   

  1. 1(Department of Electronics and Communications Engineering, Beijing Electronic Science and Technology Institute, Beijing 100070)
    2(Department of Cyberspace Security, Beijing Electronic Science and Technology Institute, Beijing 100070)
  • Online:2025-01-24 Published:2025-02-20

摘要: 目前,基于区块链技术的信息追溯系统在物联网领域中得到了广泛应用.但是,基于区块链的追溯系统在追溯数据存储和查询的过程中存在数据及用户隐私泄露的风险.针对此类问题,融合代理重加密和零知识证明技术,设计了基于联盟链构造的USB Key可信追溯解决方案.首先,在区块链上链存储过程中引入了星际文件系统(interplanetary file system, IPFS)和代理重加密技术,为参与双方建立了一个安全、高效的信息存储机制;同时,在数据查询过程中引入了zkSNARK零知识证明机制,对查询用户进行身份认证和确权操作,确保了追溯数据查询过程中用户身份的私密性;最后,基于上述可信追溯解决方案,利用Hyperledger Fabric分布式账本实现了一个USB Key的信息追溯原型系统.通过实验,证明了该方案切实可行,并有效地保障了USB Key追溯系统中追溯信息的保密性和真实性,以及在实现权限分配的前提下用户身份的隐私性.

关键词: USB Key, 代理重加密, 零知识证明, 区块链, 信息追溯

Abstract: At present, blockchainbased information traceability solutions are widely applied in the Internet of things (IoT) space. However, during the storage and query processes in blockchainbased traceability solutions, there is a risk of data and user privacy leakage.  To address these issues, this paper proposes a trusted traceability solution for USB Keys based on consortium blockchain, integrating proxy reencryption and zeroknowledge proof technologies. Firstly, the Interplanetary File System (IPFS) and proxy reencryption technologies are introduced during the onchain storage process on the blockchain to establish a secure and efficient information storage mechanism for the participating parties. Additionally, during data query, a zkSNARK zeroknowledge proof mechanism is employed for user identity authentication and rights confirmation, ensuring the privacy of user identities in the traceability data query process. Finally, based on the proposed trusted traceability solution, a USB Key information traceability prototype system is implemented using the Hyperledger Fabric distributed ledger technology. Experiments demonstrate the feasibility of this system , effectively protecting user privacy under the premise of permission allocation and ensuring the confidentiality and authenticity of traceability information in the USB Key system.

Key words: USB Key, proxy reencryption, zeroknowledge proof, blockchain, information traceability

中图分类号: