L2-MA-CPABE: A ciphertext access control scheme integrating blockchain and off-chain computation with zero knowledge proof
To enhance the security of ciphertext-policy attribute-based encryption (CP-ABE) and achieve fully distributed key generation (DKG), this paper proposes a ciphertext access control scheme integrating blockchain and off-chain computation with zero knowledge proof based on Layer-2 and multi-authority...
Saved in:
Main Authors: | , , , |
---|---|
Format: | Article |
Language: | English |
Published: |
Elsevier
2024-12-01
|
Series: | Journal of King Saud University: Computer and Information Sciences |
Subjects: | |
Online Access: | http://www.sciencedirect.com/science/article/pii/S1319157824003367 |
Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
_version_ | 1846100638842224640 |
---|---|
author | Zhixin Ren Yimin Yu Enhua Yan Taowei Chen |
author_facet | Zhixin Ren Yimin Yu Enhua Yan Taowei Chen |
author_sort | Zhixin Ren |
collection | DOAJ |
description | To enhance the security of ciphertext-policy attribute-based encryption (CP-ABE) and achieve fully distributed key generation (DKG), this paper proposes a ciphertext access control scheme integrating blockchain and off-chain computation with zero knowledge proof based on Layer-2 and multi-authority CP-ABE. Firstly, we enhance the system into two layers and construct a Layer-2 distributed key management service framework. This framework improves system efficiency and scalability while reducing costs. Secondly, we design the proof of trust contribution (PoTC) consensus algorithm to elect high-trust nodes responsible for DKG and implement an incentive mechanism for key computation through smart contract design. Finally, we design a non-interactive zero-knowledge proof protocol to achieve correctness verification of off-chain key computation. Security analysis and simulation experiments demonstrate that our scheme achieves high security while significantly improving system performance. The time consumption for data users to obtain attribute private keys is controlled at tens of milliseconds. |
format | Article |
id | doaj-art-c6b87ee5fb2d4daa8eeacb2b8f88a85b |
institution | Kabale University |
issn | 1319-1578 |
language | English |
publishDate | 2024-12-01 |
publisher | Elsevier |
record_format | Article |
series | Journal of King Saud University: Computer and Information Sciences |
spelling | doaj-art-c6b87ee5fb2d4daa8eeacb2b8f88a85b2024-12-30T04:15:29ZengElsevierJournal of King Saud University: Computer and Information Sciences1319-15782024-12-013610102247L2-MA-CPABE: A ciphertext access control scheme integrating blockchain and off-chain computation with zero knowledge proofZhixin Ren0Yimin Yu1Enhua Yan2Taowei Chen3School of Information, Yunnan University of Finance and Economics, No. 237 Longquan Road, Wuhua District, Kunming, Yunnan Province, 650221, China; Institute of Intelligent Application, Yunnan University of Finance and Economics, No. 237 Longquan Road, Wuhua District, Kunming, Yunnan Province, 650221, ChinaCorresponding authors at: School of Information, Yunnan University of Finance and Economics, No. 237 Longquan Road, Wuhua District, Kunming, Yunnan Province, 650221, China.; School of Information, Yunnan University of Finance and Economics, No. 237 Longquan Road, Wuhua District, Kunming, Yunnan Province, 650221, China; Institute of Intelligent Application, Yunnan University of Finance and Economics, No. 237 Longquan Road, Wuhua District, Kunming, Yunnan Province, 650221, ChinaSchool of Information, Yunnan University of Finance and Economics, No. 237 Longquan Road, Wuhua District, Kunming, Yunnan Province, 650221, China; Institute of Intelligent Application, Yunnan University of Finance and Economics, No. 237 Longquan Road, Wuhua District, Kunming, Yunnan Province, 650221, ChinaCorresponding authors at: School of Information, Yunnan University of Finance and Economics, No. 237 Longquan Road, Wuhua District, Kunming, Yunnan Province, 650221, China.; School of Information, Yunnan University of Finance and Economics, No. 237 Longquan Road, Wuhua District, Kunming, Yunnan Province, 650221, China; Institute of Intelligent Application, Yunnan University of Finance and Economics, No. 237 Longquan Road, Wuhua District, Kunming, Yunnan Province, 650221, ChinaTo enhance the security of ciphertext-policy attribute-based encryption (CP-ABE) and achieve fully distributed key generation (DKG), this paper proposes a ciphertext access control scheme integrating blockchain and off-chain computation with zero knowledge proof based on Layer-2 and multi-authority CP-ABE. Firstly, we enhance the system into two layers and construct a Layer-2 distributed key management service framework. This framework improves system efficiency and scalability while reducing costs. Secondly, we design the proof of trust contribution (PoTC) consensus algorithm to elect high-trust nodes responsible for DKG and implement an incentive mechanism for key computation through smart contract design. Finally, we design a non-interactive zero-knowledge proof protocol to achieve correctness verification of off-chain key computation. Security analysis and simulation experiments demonstrate that our scheme achieves high security while significantly improving system performance. The time consumption for data users to obtain attribute private keys is controlled at tens of milliseconds.http://www.sciencedirect.com/science/article/pii/S1319157824003367BlockchainLayer-2Multi-authority CP-ABEZero knowledge proofPoTC |
spellingShingle | Zhixin Ren Yimin Yu Enhua Yan Taowei Chen L2-MA-CPABE: A ciphertext access control scheme integrating blockchain and off-chain computation with zero knowledge proof Journal of King Saud University: Computer and Information Sciences Blockchain Layer-2 Multi-authority CP-ABE Zero knowledge proof PoTC |
title | L2-MA-CPABE: A ciphertext access control scheme integrating blockchain and off-chain computation with zero knowledge proof |
title_full | L2-MA-CPABE: A ciphertext access control scheme integrating blockchain and off-chain computation with zero knowledge proof |
title_fullStr | L2-MA-CPABE: A ciphertext access control scheme integrating blockchain and off-chain computation with zero knowledge proof |
title_full_unstemmed | L2-MA-CPABE: A ciphertext access control scheme integrating blockchain and off-chain computation with zero knowledge proof |
title_short | L2-MA-CPABE: A ciphertext access control scheme integrating blockchain and off-chain computation with zero knowledge proof |
title_sort | l2 ma cpabe a ciphertext access control scheme integrating blockchain and off chain computation with zero knowledge proof |
topic | Blockchain Layer-2 Multi-authority CP-ABE Zero knowledge proof PoTC |
url | http://www.sciencedirect.com/science/article/pii/S1319157824003367 |
work_keys_str_mv | AT zhixinren l2macpabeaciphertextaccesscontrolschemeintegratingblockchainandoffchaincomputationwithzeroknowledgeproof AT yiminyu l2macpabeaciphertextaccesscontrolschemeintegratingblockchainandoffchaincomputationwithzeroknowledgeproof AT enhuayan l2macpabeaciphertextaccesscontrolschemeintegratingblockchainandoffchaincomputationwithzeroknowledgeproof AT taoweichen l2macpabeaciphertextaccesscontrolschemeintegratingblockchainandoffchaincomputationwithzeroknowledgeproof |