Anonymous Identitybased Broadcast Encryption Scheme Based on SM9

Abstract

Abstract: Identitybased broadcast encryption combines broadcast encryption with identitybased encryption, which has the characteristics of broadcast encryption and avoids the certificate management work that consumes a lot of resources. In order to meet the strategic needs of autonomous and controllable cryptography technology in China, Lai Jianchang et al. designed an efficient identity broadcast encryption scheme based on China’s SM9 identitybased encryption algorithm for the first time, and gave INDsIDCPA security analysis. However, so far, there is still a lack of research on the anonymous identitybased broadcast encryption scheme based on SM9, which can effectively avoid data recipients having the ability to judge whether other recipients are legitimate. Therefore, drawing on the construction idea of generic anonymous identitybased broadcast encryption scheme proposed by He et al. and using the bilinear pair technique, the first anonymous identitybased broadcast encryption scheme with INDnIDCCA2 security and ANOIDCCA2 security under the random oracle model based on SM9 is designed, which is more easily integrated with current systems based on SM9 identity encryption algorithm. For the security of the designed scheme, the analysis process is given. Finally, the performance analysis shows that the scheme has good security and some desirable characteristics, that is, the length and computational cost of the main public key, the main private key and the receiver private key are constant, and the decryption computational cost is constant.

Key words: identity based broadcast encryption, anonymous, SM9, IND nID CCA2 security, ANO ID CCA2 security

摘要： 标识广播加密将广播加密与标识加密相结合，在具备广播加密特点的同时，避免了耗费大量资源的证书管理工作.为满足我国密码技术自主可控的战略需求，赖建昌等人首次设计了基于我国SM9标识加密算法的高效标识广播加密方案，并给出INDsIDCPA安全性分析.但目前为止，仍缺失基于SM9的匿名标识广播加密方案的研究，匿名标识广播加密能够有效避免数据接收者具备判断其他接收者是否合法的能力.因此，借鉴He等人的通用匿名标识广播加密方案的构造思想，利用双线性对技术，设计了第1个基于国密SM9的随机谕言模型下INDnIDCCA2安全和ANOIDCCA2安全的匿名标识广播加密方案.该方案更易与当前基于国密SM9标识加密算法的系统相融合.对于所设计方案的安全性给出分析过程.性能分析表明方案安全性较好且具备一定的理想特性，即方案主公钥、主私钥、接收者私钥的长度与计算成本恒定，解密计算成本恒定.

关键词: 标识广播加密, 匿名, SM9, IND nID CCA2安全, ANO ID CCA2安全

CLC Number:

TP309

潘璇, 严芬, . 基于国密SM9的匿名标识广播加密方案[J]. 信息安全研究, 2023, 9(10): 968-.

References

［1］Fiat A, Naor M. Broadcast encryption［C］ Proc of Annual Int Cryptology Conf. Berlin: Springer, 1993: 480491［2］Baek J, SafaviNaini R, Susilo W. Efficient multireceiver identitybased encryption and its application to broadcast encryption［C］ Proc of Int Workshop on Public Key Cryptography. Berlin: Springer, 2005: 380397［3］Shamir A. Identitybased cryptosystems and signature schemes［C］ Proc of Workshop on the Theory and Application of Cryptographic Techniques. Berlin: Springer, 1984: 4753［4］Boneh D, Franklin M. Identitybased encryption from the Weil pairing［C］ Proc of Annual Int Cryptology Conf. Berlin: Springer, 2001: 213229［5］Delerablée C. Identitybased broadcast encryption with constant size ciphertexts and private keys［C］ Proc of Int Conf on the Theory and Application of Cryptology and Information Security. Berlin: Springer, 2007: 200215［6］Sakai R, Furukawa J. Identitybased broadcast encryption［J］. IACR Cryptology ePrint Archive, 2007, 2007: 217［7］Bellare M, Boldyreva A, Desai A, et al. Keyprivacy in publickey encryption［C］ Proc of Int Conf on the Theory and Application of Cryptology and Information Security. Berlin: Springer, 2001: 566582［8］Hur J, Park C, Hwang S O. Privacypreserving identitybased broadcast encryption［J］. Information Fusion, 2012, 13(4): 296303［9］Zhang Leyou, Wu Qing, Mu Y. Anonymous identitybased broadcast encryption with adaptive security［C］ Proc of Int Symp on Cyberspace Safety and Security. Cham, Switzerland: Springer, 2013: 258271［10］Zhang Mingwu, Takagi T. Efficient constructions of anonymous multireceiver encryption protocol and their deployment in group email systems with privacy preservation［J］. IEEE Systems Journal, 2012, 7(3): 410419［11］Ren Yanli, Niu Zhihua, Zhang Xinpeng. Fully anonymous identitybased broadcast encryption without random oracles［J］. International Journal of Network Security, 2014, 16(4): 256264［12］Xie Li, Ren Yanli. Efficient anonymous identitybased broadcast encryption without random oracles［J］. International Journal of Digital Crime and Forensics, 2014, 6(2): 4051［13］Fan ChunI, Tseng YiFan. Anonymous multireceiver identitybased authenticated encryption with CCA security［J］. Symmetry, 2015, 7(4): 18561881［14］Xu Peng, Li Jingnan, Wang Wei, et al. Anonymous identitybased broadcast encryption with constant decryption complexity and strong security［C］ Proc of the 11th ACM on Asia Conf on Computer and Communications Security. New York: ACM, 2016: 223233［15］He Kai, Weng Jian, Liu Jianan, et al. Anonymous identitybased broadcast encryption with chosenciphertext security［C］ Proc of the 11th ACM on Asia Conf on Computer and Communications Security. New York: ACM, 2016: 247255［16］He Kai, Weng Jian, Au Man Ho, et al. Generic anonymous identitybased broadcast encryption with chosenciphertext security［G］ LNCS 9723: Proc of Australasian Conf on Information Security and Privacy. Berlin: Springer, 2016: 207222［17］Ming Yang, Yuan Hongping. Fully secure anonymous identity based broadcast encryption with group of prime order［J］. International Journal of Network Security, 2019, 21(1): 716［18］Tseng YiFan, Fan ChunI. Anonymous multireceiver identitybased encryption against chosenciphertext attacks with tight reduction in the standard model［J］. Security and Communication Networks, 2021, 2021:111［19］袁峰, 程朝辉. SM9标识密码算法综述［J］. 信息安全研究, 2016, 2(11): 10081027［20］赖建昌, 黄欣沂, 何德彪. 一种基于商密SM9的高效标识广播加密方案［J］. 计算机学报, 2021, 44(5): 897907［21］Cheng Zhaohui. Security analysis of SM9 key agreement and encryption［C］ Proc of Int Conf on Information Security and Cryptology. Berlin: Springer, 2018: 325［22］刘潇, 刘魏然, 伍前红, 等. 选择密文安全的基于身份的广播加密方案［J］. 密码学报, 2015, 2(1): 6676

[1]	. Efficient Distributed Anonymous Heterogeneous Cross-domain Authentication Scheme for Industrial Internet of Things [J]. Journal of Information Security Reserach, 2022, 8(10): 964-.
[2]	. Side Information Fusion Dual Anonymous Location Privacy Protection Scheme [J]. Journal of Information Security Research, 2020, 6(5): 421-426.
[3]	. A Solution to Key Collision of the Combined Public Key [J]. Journal of Information Security Research, 2018, 4(3): 256-260.
[4]	. Research on Information Crawling Technology of Anonymous Web- site [J]. Journal of Information Security Research, 2017, 3(10): 0-0.
[5]	. Overview on SM9 Identity Based Cryptographic Algorithm [J]. Journal of Information Security Research, 2016, 2(11): 1008-1027.