移动云计算环境下密码计算可证安全负载迁移研究

It is necessary for the clients to offload securely the cryptographic computations in mobile cloud computing(MCC). Different from other scholars' research ideas, the project is not to study separately outsourcing of specific functions, but to systematically explore the provable security theory of offloading of the cryptographic computations by combining it with the optimization of the mobile devices' energy consumption from the perspective of shifted cryptographic protocols. The project aims at the following. We will establish the security model of encryption and decryption offloading in mobile cloud computing and design the (batch) encryption and decryption offloading schems based on the traditional cryptogram and attribute based encryption systems, respectively. We will propose the forward/backward secure offloading schemes of incremental cryptography without the trusted third party and check whether the schemes provide the protection of user privacy, data integrity and data freshness. The tight security proof of all the above-mentioned schemes will be given under the random oracle or the standard model. We will define the security model of the offloading signature with the existential unforgeability of signature under the chosen message attacks and the existential unforgeability of attribute based signature(ABS) under the attributes collusion attacks, and further discuss the provable security theory of offloading of the traditional cryptographic signature and attribute based signature. In addition, the security model, the schemes and security proofs of the offloading signcryption and those of authentication (authenticated key agreement) in mobile cloud computing will be addressed. Finally, an optimization model of enegry consumption and adaptive offloading of cryptographic computations will be proposed and its application in the mobile cloud computing environments will also be considered.The results of this project will also promote the development of provable security cryptographic theory itself.

移动云计算环境下用户端密码计算安全负载迁移必不可少。与其他学者研究思路不同，本项目不单独研究具体函数计算外包，而结合用户端能耗优化需求，从密码协议被迁移执行的角度，系统地探讨密码计算可证安全负载迁移理论。包括：建立MCC环境下加解密负载迁移安全模型，分别设计传统密码和属性基密码（批量）加解密负载迁移方案，在随机预言模型或标准模型下给出方案紧致安全性证明；构造无可信方、前向/后向安全的增量密码负载迁移方案，验证方案是否满足安全性、完整性和新鲜性。建立选择消息攻击及属性基签名属性合谋攻击下负载迁移签名存在性不可伪造安全模型，探讨MCC环境下传统密码签名和ABS负载迁移可证安全理论。研究MCC签密与认证负载迁移安全模型，设计相应方案，在正式安全模型中给出严格安全性证明。本项目成果也必将促进可证安全密码理论本身的发展。