移动云计算环境下密码计算可证安全负载迁移研究

It is necessary for the clients to offload securely the cryptographic computations in mobile cloud computing(MCC). Different from other scholars' research ideas, the project is not to study separately outsourcing of specific functions, but to systematically explore the provable security theory of offloading of the cryptographic computations by combining it with the optimization of the mobile devices' energy consumption from the perspective of shifted cryptographic protocols. The project aims at the following. We will establish the security model of encryption and decryption offloading in mobile cloud computing and design the (batch) encryption and decryption offloading schems based on the traditional cryptogram and attribute based encryption systems, respectively. We will propose the forward/backward secure offloading schemes of incremental cryptography without the trusted third party and check whether the schemes provide the protection of user privacy, data integrity and data freshness. The tight security proof of all the above-mentioned schemes will be given under the random oracle or the standard model. We will define the security model of the offloading signature with the existential unforgeability of signature under the chosen message attacks and the existential unforgeability of attribute based signature(ABS) under the attributes collusion attacks, and further discuss the provable security theory of offloading of the traditional cryptographic signature and attribute based signature. In addition, the security model, the schemes and security proofs of the offloading signcryption and those of authentication (authenticated key agreement) in mobile cloud computing will be addressed. Finally, an optimization model of enegry consumption and adaptive offloading of cryptographic computations will be proposed and its application in the mobile cloud computing environments will also be considered.The results of this project will also promote the development of provable security cryptographic theory itself.

移动云计算环境下用户端密码计算安全负载迁移必不可少。与其他学者研究思路不同，本项目不单独研究具体函数计算外包，而结合用户端能耗优化需求，从密码协议被迁移执行的角度，系统地探讨密码计算可证安全负载迁移理论。包括：建立MCC环境下加解密负载迁移安全模型，分别设计传统密码和属性基密码（批量）加解密负载迁移方案，在随机预言模型或标准模型下给出方案紧致安全性证明；构造无可信方、前向/后向安全的增量密码负载迁移方案，验证方案是否满足安全性、完整性和新鲜性。建立选择消息攻击及属性基签名属性合谋攻击下负载迁移签名存在性不可伪造安全模型，探讨MCC环境下传统密码签名和ABS负载迁移可证安全理论。研究MCC签密与认证负载迁移安全模型，设计相应方案，在正式安全模型中给出严格安全性证明。本项目成果也必将促进可证安全密码理论本身的发展。

在移动云计算环境下，用户端密码计算成本太高，因此，用户端有必要执行安全负载迁移。与文献中的移动用户密码计算研究思路不同，本项目将具体函数计算外包、用户端能耗优化需求结合起来，设计密码协议迁移执行的方案，系统地研究密码计算负载迁移可证安全理论。.具体研究成果如下：建立了移动云计算环境下加解密负载迁移安全模型，分别设计了传统密码、属性基密码以及传统密码、属性基密码的批量加解密负载迁移协议，证明了这些加解密负载迁移方案在随机预言模型的紧致安全性；设计了无可信方的前向或后向安全的增量密码负载迁移方案，探讨了方案的安全性、完整性和新鲜性，并给出了这些方案的形式化安全证明。建立了负载迁移签名存在性不可伪造安全模型，考虑抵御选择消息攻击及属性基签名属性合谋攻击。分别设计了移动云计算环境下签名负载迁移和属性基签名负载迁移方案，探讨了这些方案的安全性，给出了随机预言模型下的形式化安全分析。建立了移动云计算下认证负载迁移安全模型，设计了若干移动云计算下多方认证方案，在正式安全模型中给出了方案随机预言模型下的严格安全性证明。建立了移动云计算下签密负载迁移安全模型，设计了移动云计算下签密负载迁移方案，依照正式安全模型给出了随机预言模型下的安全性证明。.本项目取得的成果有望推动安全云计算的应用，也将促进可证安全密码理论的发展，对于大数据安全处理也有一定的借鉴作用。