因在细粒度访问控制、定向广播等方面的广泛应用,基于属性的密码机制逐渐受到关注.以一个全安全的属性基加密(ABE)机制为基本构件,结合NAXOS技巧,提出了一个全安全的属性基认证密钥交换协议,并利用可证明安全理论在基于属性的eCK模型中进行了严格的形式化证明.相比已有的同类协议,提出的协议具有更高的安全性,并在提供丰富的属性认证策略的同时,减小了通信开销.%Attribute-Based Encryption (ABE) scheme has been drawing attention for having a broad application in the area of fine-grained access control, directed broadcast, and so on. Combined with NAXOS technique, this paper proposed a fully secure Attribute-Based Authenticated Key Exchange (ABAKE) protocol based on an ABE scheme, and gave a detailed security proof in the Attribute-Based eCK ( ABeCK) model by provable security theory. Compared with other similar protocols, the proposed protocol obtains stronger security and flexible attribute authentication policy, while decreasing communications cost.
展开▼
