【作者】 王宏伟；

【导师】 廖永建；

【作者基本信息】 电子科技大学 ， 电子信息（专业学位）， 2025， 硕士

【摘要】 随着互联网技术的迅猛发展,云计算技术日益成熟,并在智慧城市、智慧医疗等领域得到了广泛应用。然而,云计算中的信息安全问题也随之成为研究热点。随着云计算的深入应用,新的安全需求不断涌现,例如密钥的可撤销性。同时,量子计算的崛起使得基于传统密码学困难问题的方案在未来可能无法保障信息安全。针对这些问题,本文提出了基于格上困难问题的身份基密码学方案,并进行了仿真测试,详细探讨了每个方案在实际中的应用场景。本文的主要贡献如下:(1)提出了格上可撤销的身份基等式测试加密方案。该方案创新性地将可撤销功能与等式测试功能相结合,能够在用户私钥丢失或泄露时及时撤销,从而有效保护用户数据安全。方案中的计算主要基于大矩阵乘法运算,相较于传统密码学方案,显著提升了运算效率。根据攻击者是否拥有陷门,该方案分别满足OW-CCA2安全和IND-CCA2安全,具备较高的安全性。(2)提出了格上可撤销的身份基门限解密方案。该方案将可撤销功能与门限解密功能相结合,能够在发现泄密者时迅速撤销私钥,确保用户数据安全。在运算效率方面,该方案同样采用大矩阵乘法运算,相较于传统密码学方案具有明显优势。此外,该方案满足自适应的IND-IBTD-CPA安全,进一步增强了系统的安全性。(3)提出了格上身份基等式测试签密方案。该方案允许第三方在不侵犯用户隐私的前提下进行数据搜索,并且接收方能够验证数据的来源。在运算效率上,该方案同样基于大矩阵乘法运算,相较于传统密码学方案具有显著优势。同时,根据攻击者的不同类型,该方案分别满足OW-s ID-CCA、IND-s ID-CCA和SUF-s ID-CMA安全,确保了方案在不同攻击场景下的安全性。本文将从应用场景、方案构造、安全性证明、功能对比和仿真测试等方面,全面阐述每个方案的创新性、实用性和安全性,并通过理论分析与实验验证相结合的方式,系统展示其在云计算环境下的应用潜力与性能优势。更多还原

【Abstract】 With the rapid development of internet technology,cloud computing has become increasingly mature and is widely applied in fields such as smart cities and smart health-care.However,information security issues in cloud computing have also become a re-search hotspot.As cloud computing continues to advance,new security requirements are constantly emerging,such as key revocability.Meanwhile,the rise of quantum comput-ing poses a potential threat to traditional cryptographic schemes based on hard problems,which may no longer ensure information security in the future.To address these chal-lenges,this thesis proposes identity-based cryptographic schemes based on lattice hard problems,conducts simulation tests,and explores the practical application scenarios of each scheme in detail.The main contributions of this thesis are as follows:(1)Proposes a revocable identity-based encryption with equality test scheme on lat-tices.The scheme innovatively combines revocability with equality testing,enabling timely revocation of user private keys in cases of loss or leakage,thereby effectively pro-tecting user data security.The computations in the scheme are primarily based on large matrix multiplications,significantly improving computational efficiency compared to tra-ditional cryptographic schemes.Depending on whether the attacker possesses a trapdoor,the scheme satisfies OW-CCA2 security and IND-CCA2 security,respectively,demon-strating high security.(2)Proposes a revocable identity-based threshold decryption scheme on lattices.The scheme integrates revocability with threshold decryption,allowing for the immediate re-vocation of private keys upon detecting a leak,thereby ensuring user data security.In terms of computational efficiency,the scheme also employs large matrix multiplications,offering clear advantages over traditional cryptographic schemes.Additionally,the scheme satisfies adaptive IND-IBTD-CPA security,further enhancing system security.(3)Proposes an identity-based signcryption with equality test scheme on lattices.The scheme enables third parties to perform data searches without violating user privacy,while the receiver can verify the source of the data.In terms of computational efficiency,the scheme is also based on large matrix multiplications,providing significant advantages over traditional cryptographic schemes.Moreover,depending on the type of attacker,the scheme satisfies OW-s ID-CCA,IND-s ID-CCA,and SUF-s ID-CMA security,ensuring its robustness across different attack scenarios.This thesis will comprehensively elaborate on the innovation,practicality,and secu-rity of each scheme from perspectives such as application scenarios,scheme construction,security proofs,functional comparisons,and simulation tests.By combining theoretical analysis with experimental validation,it systematically demonstrates the application po-tential and performance advantages of these schemes in cloud computing environments.更多还原