Research Article
Research on the Update Method of CP-ABE Access Control Strategy Based on Smart Contract
@INPROCEEDINGS{10.1007/978-3-031-24383-7_27, author={Yu Hao and Bo Cui and Ru Li and Tingting Song and Wenhan Hou}, title={Research on the Update Method of CP-ABE Access Control Strategy Based on Smart Contract}, proceedings={Collaborative Computing: Networking, Applications and Worksharing. 18th EAI International Conference, CollaborateCom 2022, Hangzhou, China, October 15-16, 2022, Proceedings, Part I}, proceedings_a={COLLABORATECOM}, year={2023}, month={1}, keywords={Blockchain CP-ABE IPFS Access Control Policy update}, doi={10.1007/978-3-031-24383-7_27} }- Yu Hao
Bo Cui
Ru Li
Tingting Song
Wenhan Hou
Year: 2023
Research on the Update Method of CP-ABE Access Control Strategy Based on Smart Contract
COLLABORATECOM
Springer
DOI: 10.1007/978-3-031-24383-7_27
Abstract
The CP-ABE access control method based on blockchain realizes fine-grained access control of data and ensures the storage of ciphertext security. However, there are some problems in updating the access control policy. For example, the blockchain cannot be used as ample data storage. The ciphertext size increases with the number of attributes and the complexity of the access control policy, and the CP-ABE based on bilinear mapping is expensive to calculate. Therefore, this paper proposes dividing the ciphertext into data-related ciphertext and policy-related ciphertext, which are stored in blockchain and IPFS. It is worth noting that this paper uses the RSA-based CP-ABE encryption method, which can effectively reduce the computational cost of encryption and decryption and achieve a constant ciphertext size. In addition, we also systematically analyze and compare the advantages and costs generated by CP-ABE based on bilinear mapping and CP-ABE based on RSA. Through experimental analysis, security analysis, and formal analysis, compared with the existing access control policy update methods, the scheme proposed in this paper shows better performance when frequently updating the access control policy.
