Attribute-Based Broadcast Signcryption Scheme with Equivalence Testing Support Under Cloud-Edge Collaboration

doi:10.3778/j.issn.1673-9418.2410023

Abstract

Abstract: The inherent characteristics of edge computing, including content awareness, real-time computation, and parallel processing, have intensified the existing challenges related to data security and privacy protection that are already present in cloud computing environments. To address the escalating risks of privacy data leakage and other security concerns within edge computing contexts, this paper proposes a lightweight attribute-based broadcast encryption scheme that supports equivalence testing. This scheme employs an attribute-based encryption mechanism to facilitate fine-grained access control over data, ensuring that decryption and access are granted only when a user??s attributes align with predefined policies, thereby bolstering data security. By integrating broadcast encryption technology, it guarantees both the confidentiality of the data as well as its integrity and authenticity. Additionally, through the application of equivalence testing techniques, cloud servers can intelligently categorize encrypted data for ordered classification storage, enhancing the efficiency of data management processes. Moreover, taking into account the resource-constrained nature of edge computing environments, this approach offloads intensive computational tasks to edge servers via outsourced computation methods, effectively alleviating computational burdens on user devices while improving overall system performance and user experience. The security of this scheme is validated under a random oracle model. Performance analysis indicates that it offers distinct advantages in functional capabilities and computational efficiency, suitable for deployment in edge computing scenarios.

Key words: edge computing, broadcast signcryption, attribute-based signcryption, equality test

摘要： 边缘计算的内容感知、实时计算、并行处理等开放特性，加剧了原本在云计算环境中就已存在的数据安全与隐私保护挑战。针对边缘计算环境中日益凸显的隐私数据泄露风险等安全问题，提出了一个支持等值测试的轻量级属性基广播签密方案。该方案运用属性基加密机制，实现了对数据的细粒度访问控制，确保仅当用户的属性符合预设策略时才可以解密访问数据，增强了数据的安全性；结合广播签密技术，保障了数据的机密性，确保数据的完整性和不可伪造性；利用等值测试技术，使得云服务器能够智能地对密文进行分类处理，实现了密文的有序分类存储，提升了数据管理的便捷性；此外考虑到边缘计算环境下资源受限的特点，通过外包计算的方式，将繁重的计算任务转移至边缘服务器，有效减轻了用户端的计算负担，提高了整体系统的运行效率与用户体验。在随机预言机模型下，证明了方案的安全性，性能分析表明该方案在功能特性和计算效率方面具有一定优势，在边缘计算环境中具有可适用性。

关键词: 边缘计算, 广播签密, 属性基签密, 等值测试

NIU Shufen, WANG Weifang, DONG Runyuan, ZHANG Yan, NAN Xingxing, HU Lin. Attribute-Based Broadcast Signcryption Scheme with Equivalence Testing Support Under Cloud-Edge Collaboration[J]. Journal of Frontiers of Computer Science and Technology, 2025, 19(8): 2241-2250.

牛淑芬, 王卫芳, 董润园, 张岩, 南兴兴, 胡林. 云边协同下支持等值测试的属性基广播签密方案[J]. 计算机科学与探索, 2025, 19(8): 2241-2250.

References

[1] SAHAI A, WATERS B. Fuzzy identity-based encryption[C]// Proceedings of the Annual International Conference on the Theory and Applications of Cryptographic Techniques. Berlin, Heidelberg: Springer, 2005: 457-473.
[2] YANG G M, TAN C H, HUANG Q, et al. Probabilistic public key encryption with equality test[C]//Topics in Cryptology-CT-RSA 2010. Berlin, Heidelberg: Springer, 2010: 119-131.
[3] PENG C, CHEN J H, OBAIDAT M S, et al. Efficient and provably secure multireceiver signcryption scheme for multicast communication in edge computing[J]. IEEE Internet of Things Journal, 2020, 7(7): 6056-6068.
[4] YANG X D, LI X X, LI T, et al. Efficient and anonymous multi-message and multi-receiver electronic health records sharing scheme without secure channel based on blockchain[J]. Transactions on Emerging Telecommunications Technologies, 2021, 32(12): e4371.
[5] GOYAL V, PANDEY O, SAHAI A, et al. Attribute-based encryption for fine-grained access control of encrypted data[C]//Proceedings of the 13th ACM Conference on Computer and Communications Security. New York: ACM, 2006: 89-98.
[6] BETHENCOURT J, SAHAI A, WATERS B. Ciphertext-policy attribute-based encryption[C]//Proceedings of the 2007 IEEE Symposium on Security and Privacy. Piscataway: IEEE, 2007: 321-334.
[7] MAJI H, PRABHAKARAN M, ROSULEK M. Attribute-based signatures: achieving attribute-privacy and collusion-resistance[J]. IACR Cryptology ePrint Archive, 2008: 328.
[8] GAGNé M, NARAYAN S, SAFAVI-NAINI R. Threshold attribute-based signcryption[C]//Proceedings of the 2010 International Conference on Security and Cryptography for Networks. Berlin, Heidelberg: Springer, 2010: 154-171.
[9] YU J G, LIU S H, WANG S L, et al. LH-ABSC: a lightweight hybrid attribute-based signcryption scheme for cloud-fog-assisted IoT[J]. IEEE Internet of Things Journal, 2020, 7(9): 7949-7966.
[10] 郭丽峰, 邢晓敏, 郭慧. 云存储中高效可追踪可撤销的属性基加密方案[J]. 密码学报, 2023, 10(1): 131-145.
GUO L F, XING X M, GUO H. An efficient traceable and revocable attribute-based encryption scheme in cloud storage [J]. Journal of Cryptologic Research, 2023, 10(1): 131-145.
[11] OBIRI I A, XIA Q, XIA H, et al. Personal health records sharing scheme based on attribute based signcryption with data integrity verifiable[J]. Journal of Computer Security, 2022, 30(2): 291-324.
[12] ELTAYIEB N, ELHABOB R, HASSAN A, et al. A blockchain-based attribute-based signcryption scheme to secure data sharing in the cloud[J]. Journal of Systems Architecture, 2020, 102: 101653.
[13] 俞惠芳, 乔一凡, 孟茹. 面向区块链金融的抗量子属性基门限环签密方案[J]. 信息网络安全, 2023, 23（7）: 44-52.
YU H F, QIAO Y F, MENG R. Attribute-based anti-quantum threshold ring signcryption scheme for blockchain-based finance[J]. Netinfo Security, 2023, 23(7): 44-52.
[14] DEBNATH S, BHUYAN B, SAHA A K. Privacy preserved secured outsourced cloud data access control scheme with efficient multi-authority attribute based signcryption[J]. Multiagent and Grid Systems, 2020, 16(4): 409-432.
[15] XIONG H, HOU Y Z, HUANG X, et al. Secure message classification services through identity-based signcryption with equality test towards the Internet of vehicles[J]. Vehicular Communications, 2020, 26: 100264.
[16] WANG Y H, CUI Y Z, HUANG Q, et al. Attribute-based equality test over encrypted data without random oracles[J]. IEEE Access, 2020, 8: 32891-32903.
[17] LI C, SHEN Q N, XIE Z K, et al. Large universe CCA2 CP-ABE with equality and validity test in the standard model [J]. The Computer Journal, 2021, 64(4): 509-533.
[18] CUI Y Z, HUANG Q, HUANG J Y, et al. Ciphertext-policy attribute-based encrypted data equality test and classification[J]. The Computer Journal, 2019, 62(8): 1166-1177.
[19] ZHAO Y N, WANG Y P, LIANG Y H, et al. Identity-based broadcast signcryption scheme for vehicular platoon communication[J]. IEEE Transactions on Industrial Informatics, 2023, 19(6): 7814-7824.
[20] LIU S H, CHEN L Q, HAN J G, et al. Lightweight ID-based broadcast signcryption for cloud-fog-assisted IoT[J]. Journal of Systems Architecture, 2022, 130: 102648.
[21] 牛淑芬, 周思玮, 吕锐曦, 等. 医疗社交网络中基于云计算的属性基签密方案[J]. 电子与信息学报, 2023, 45(3): 884-893.
NIU S F, ZHOU S W, Lü R X, et al. Attribute-base signcryption scheme based on cloud computing in mobile medical social network[J]. Journal of Electronics & Information Technology, 2023, 45(3): 884-893.