<p>In a function-hiding inner product functional encryption (FH-IPFE) scheme, both secret keys and ciphertexts are associated with vectors. Given a secret key for an <i>n</i>-dimensional vector <Emphasis Type="BoldItalic">x</Emphasis>, and a ciphertext for an <i>n</i>-dimensional vector <Emphasis Type="BoldItalic">y</Emphasis>, a decryptor learns the inner product value 〈<Emphasis Type="BoldItalic">x, y</Emphasis>〉 and nothing else about both <Emphasis Type="BoldItalic">x</Emphasis> and <Emphasis Type="BoldItalic">y</Emphasis>. FH-IPFE has been shown to be very useful in privacy-preserving computation. In this paper, we first propose a new (secret-key) FH-IPFE scheme and prove it the secure in the generic group model. Compared with the state-of-the-art scheme of Kim <i>et al.</i>, the proposed scheme has comparable performance in decryption and reduces 1) the size of master key from <i>n</i><sup>2</sup> to 3<i>n</i> − 1, 2) the setup complexity from <i>O</i>(<i>n</i><sup>3</sup>) to <i>O</i>(<i>n</i>), and 3) the encryption and key generation complexities from <i>O</i>(<i>n</i><sup>2</sup>) to <i>O</i>(<i>n</i> log <i>n</i>). To the best of our knowledge, this is the most efficient construction based on pairings to date. Moreover, we apply our FH-IPFE scheme to build a fine-grained data sharing system, where data owners store their encrypted data on an untrusted server. Our design supports not only basic database operations but also statistical analyses on encrypted data. To achieve this goal, we also introduce a new security notion, partial-key exposure-resilient simulation-based security (PK-ER-SIM), for FH-IPFE, which enables lightweight clients to securely delegate heavy computations to a powerful server and may be independent of interest.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Efficient Function-Hiding Inner Product Functional Encryption and Its Application to Fine-Grained Data Sharing

  • Ming Wan,
  • Geng Wang,
  • Shi-Feng Sun,
  • Da-Wu Gu,
  • Gong-Yu Shi

摘要

In a function-hiding inner product functional encryption (FH-IPFE) scheme, both secret keys and ciphertexts are associated with vectors. Given a secret key for an n-dimensional vector x, and a ciphertext for an n-dimensional vector y, a decryptor learns the inner product value 〈x, y〉 and nothing else about both x and y. FH-IPFE has been shown to be very useful in privacy-preserving computation. In this paper, we first propose a new (secret-key) FH-IPFE scheme and prove it the secure in the generic group model. Compared with the state-of-the-art scheme of Kim et al., the proposed scheme has comparable performance in decryption and reduces 1) the size of master key from n2 to 3n − 1, 2) the setup complexity from O(n3) to O(n), and 3) the encryption and key generation complexities from O(n2) to O(n log n). To the best of our knowledge, this is the most efficient construction based on pairings to date. Moreover, we apply our FH-IPFE scheme to build a fine-grained data sharing system, where data owners store their encrypted data on an untrusted server. Our design supports not only basic database operations but also statistical analyses on encrypted data. To achieve this goal, we also introduce a new security notion, partial-key exposure-resilient simulation-based security (PK-ER-SIM), for FH-IPFE, which enables lightweight clients to securely delegate heavy computations to a powerful server and may be independent of interest.