Secure sharing scheme for low-altitude UAV operational data based on broadcast proxy re-encryption
-
摘要:
在开放动态的低空智联网中，无人机(UAV)运行数据共享面临着数据窃听、重放攻击和未授权访问等安全威胁，可能严重危及低空运行安全，保障该数据安全共享至关重要。现有方案利用身份基广播加密实现点对多点数据安全共享。然而，该类方案往往需预设共享组容量，限制了共享灵活性；此外，在解密过程中，共享者需为组内其他成员执行额外的数学运算，导致解密计算负担较重。因此，提出一种基于广播代理重加密的低空无人机运行数据安全共享方案。所提方案利用身份基广播加密与对称加密技术构建一种混合加密机制，通过密文重加密将点对点共享转化成点对多点共享。在点对多点共享过程中，所提方案支持用户仅持有固定长度的私钥即可实现无状态的数据群组共享且无需预设组容量，兼顾共享安全性、灵活性和高效性。实验结果表明：在点对点共享中，所提方案加解密计算开销固定不变；在点对多点共享中，相比次优方案，所提方案重加密密钥生成时间开销降低40%以上，重加密密文解密运行时间约为固定的3.6 ms。
Abstract:In the open and dynamic low-altitude intelligent network, unmanned aerial vehicle (UAV) operational data sharing faces security threats such as data eavesdropping, replay attacks, and unauthorized access, which may seriously jeopardize low-altitude operation security. It is crucial to guarantee the secure sharing of UAV operational data. Existing schemes utilize identity-based broadcast encryption to achieve point-to-multipoint data security sharing. Nevertheless, the sharing flexibility is sometimes restricted by these schemes' requirement to preset the sharing group capacity. Moreover, in the decryption process, the sharer needs to perform additional mathematical operations for other group members, which leads to a heavy burden of decryption computation. In this paper, we propose a secure sharing scheme for low-altitude UAV operational data based on broadcast proxy re-encryption. Through ciphertext re-encryption, the suggested technique creates a hybrid encryption mechanism that converts point-to-point sharing into point-to-multipoint sharing by utilizing identity-based broadcast encryption and symmetric encryption. In point-to-multipoint sharing, the scheme supports stateless data group sharing with fixed-length private keys and without preset group capacity, taking into account the security, flexibility, and efficiency of sharing. Experimental results show that in point-to-point sharing, the encryption and decryption computation overhead is fixed; in point-to-multipoint sharing, compared with the suboptimal scheme, the re-encryption key generation overhead is reduced by more than 40%, and the re-encryption ciphertext decryption algorithm costs about 3.6 milliseconds.
-
Key words:
- unmanned aerial vehicle /
- data sharing /
- data security /
- encryption algorithm /
- ciphertext
-
图 1 低空无人机运行数据安全共享系统模型
Figure 1. System model for secure sharing of low-altitude UAV operational data
图 6 不同方案$ \text{MasterGen} $算法的运行时间对比
Figure 6. Runtime comparison of $ \text{MasterGen} $ algorithm for different schemes
图 7 不同方案$ \text{Enc} $算法的运行时间对比
Figure 7. Runtime comparison of $ \text{Enc} $ algorithm for different schemes
图 8 不同方案$ \text{ReEnc} $算法的运行时间对比
Figure 8. Runtime comparison of $ \text{ReEnc} $ algorithm for different schemes
图 9 不同方案$ \mathrm{Dec}2 $算法的运行时间对比
Figure 9. Runtime comparison of $ \mathrm{Dec}2 $ algorithm for different schemes
表 1 初始化阶段与初始共享阶段各算法计算对比
Table 1. computation comparison of algorithms in initialization phase and initial sharing phase
方案 不同算法的计算开销 $ \text{MasterGen} $ $ \text{Re}\mathrm{g}\text{ister} $ $ \text{Enc} $ $ \text{Dec} $ CZL[21] $ (2n+1){t}_{\rm e}+{t}_{\rm b} $ $ {t}_{\rm e} $ $ 7{t}_{\rm e} $ $ {t}_{\rm b} $ ZCD[23] $ (2n+1){t}_{\rm e}+3{t}_{\rm b} $ $ {t}_{\rm e} $ $ 5{t}_{\rm e} $ $ {t}_{\rm b} $ GLX[24] $ 2n{t}_{\rm e}+{t}_{\rm b} $ $ {t}_{\rm e} $ $ 4{t}_{\rm e} $ $ {t}_{\rm b} $ 本文方案 $ 2{t}_{\rm e}+{t}_{\rm b} $ $ {t}_{\rm e} $ $ 5{t}_{\rm e} $ $ {t}_{\rm e}+{t}_{\rm b} $ 
下载: 导出CSV
表 2 多主体共享阶段各算法计算对比
Table 2. Computation comparison of algorithms in multi-subject sharing phase
方案 不同算法的计算开销 $ \text{ReKeyGen} $ $ \text{ReEnc} $ $ \mathrm{Dec}2 $ CZL[21] $ \left({n}^{2}+n+5\right){t}_{\rm e} $ $ {t}_{\rm b} $ $ (n-1){t}_{\rm e}+2{t}_{\rm b} $ ZCD[23] $ \left(2n+5\right){t}_{\rm e} $ $ 2{t}_{\rm b} $ $ n{t}_{\rm e}+4{t}_{\rm b} $ GLX[24] $ \left(2n+6\right){t}_{\rm e} $ $ 2{t}_{\rm b} $ $ n{t}_{\rm e}+3{t}_{\rm b} $ 本文方案 $ \left(n+4\right){t}_{\rm e} $ $ {t}_{\rm e}+{t}_{\rm b} $ $ {t}_{\rm e}+2{t}_{\rm b} $
下载: 导出CSV
表 3 不同方案ReKeyGen算法的运行时间对比
Table 3. Runtime comparison of ReKeyGen algorithm for different schemes
下载: 导出CSV
-
[1] 中国信息协会低空经济分会. 低空经济发展报告(2024—2025) [EB/OL]. (2025-02-28)[2025-04-17]. http://www.ciia.org.cn/news/26549.cshtml.China Information Association Low Altitude Economy Branch. Low altitude economy development report (2024—2025)[EB/OL]. (2025-02-28)[2025-04-17]. http://www.ciia.org.cn/news/26549.cshtml(in Chinese). [2] 宋志勇. 高质量发展通用航空和低空经济[EB/OL]. (2025-01-03) [2025-04-17]. https://www.gov.cn/zhengce/202501/content_6996109.htm.Song Z Y. High-quality development of general aviation and the low altitude economy [EB/OL]. (2025-01-03) [2025-04-17]. https://www.gov.cn/zhengce/202501/content_6996109.htm(in Chinese). [3] 低空产业联盟. 低空智能网联体系参考架构[EB/OL]. (2024-11-11)[2025-04-17]. https://www.miit-eidc.org.cn/art/2024/11/11/art_1644_11070.html.Low Altitude Industry Alliance. Reference architecture for low altitude intelligent network system [EB/OL]. (2024-11-11) [2025-04-17]. https://www.miit-eidc.org.cn/art/2024/11/11/art_1644_11070.html(in Chinese). [4] 叶海军, 王国峰, 冯志勇. 有人无人网络化信息系统动态协同技术研究[J]. 通信学报, 2023, 44(7): 185-196.Ye H J, Wang G F, Feng Z Y. Research on dynamic cooperative technology of manned and unmanned networked information system[J]. Journal on Communications, 2023, 44(7): 185-196 (in Chinese). [5] Zhou Z Q, Luo X L, Mao J, et al. Blockchain-assisted efficient data sharing scheme with accountability and privacy-preserving for Internet of drones networks[J]. IEEE Transactions on Vehicular Technology, 2025, 74(2): 3253-3268. [6] 中国交通运输部. 民用无人驾驶航空器运行安全管理规则[EB/OL]. (2024-01-01)[2025-04-17]. https://xxgk.mot.gov.cn/2020/gz/202401/W020240103570150577134.pdf.Ministry of Transport of the People's Republic of China. Operational safety management rules for civil unmanned aircraft [EB/OL]. (2024-01-01) [2025-04-17]. https://xxgk.mot.gov.cn/2020/gz/202401/W020240103570150577134.pdf(in Chinese). [7] Nikooghadam M, Amintoosi H, Islam S H, et al. A provably secure and lightweight authentication scheme for Internet of Drones for smart city surveillance[J]. Journal of Systems Architecture, 2021, 115: 101955. [8] Khan M A, Ullah I, Alkhalifah A, et al. A provable and privacy-preserving authentication scheme for UAV-enabled intelligent transportation systems[J]. IEEE Transactions on Industrial Informatics, 2022, 18(5): 3416-3425. [9] Liu Z Q, Guo J J, Huang F R, et al. Lightweight trustworthy message exchange in unmanned aerial vehicle networks[J]. IEEE Transactions on Intelligent Transportation Systems, 2023, 24(2): 2144-2157. [10] George D R, Sciancalepore S, Zannone N. Privacy-preserving multi-party access control for third-party UAV services[C]//Proceedings of the 28th ACM Symposium on Access Control Models and Technologies. New York: ACM, 2023: 19-30. [11] Han P B, Sui A N, Wu J. A secure and efficient access-control scheme based on blockchain and CP-ABE for UAV swarm[J]. Drones, 2025, 9(2): 148. [12] Wang Z Z, Li X C, Cheng H T, et al. An access control scheme for UAV swarm based on CP-ABE[C]//Proceedings of the 4th International Conference on Autonomous Unmanned Systems. Berlin: Springer, 2025: 172-185. [13] Ruan C H, Hu C Q, Li X W, et al. A revocable and fair outsourcing attribute-based access control scheme in metaverse[J]. IEEE Transactions on Consumer Electronics, 2024, 70(1): 3781-3791. [14] Yang H J, Xu Q C. Fine-grained access control for lightweight data sharing of UAVs[C]// Proceedings of the IEEE Cyber Science and Technology Congress. Piscataway: IEEE Press, 2024: 476-479. [15] Gayathri Y M, Rekha K S. Comparative analysis of identity-based-broadcast encryption with attribute-based encryption for reduced storage cost of multi users in a public cloud[J]. Proceedings of the 16th International Engineering and Computing Research Conference, 2024, 2729: 030001. [16] Liu L, Zhang Y Q, Li X J. KeyD: secure key-deduplication with identity-based broadcast encryption[J]. IEEE Transactions on Cloud Computing, 2021, 9(2): 670-681. [17] Maiti S, Misra S. P2B: privacy preserving identity-based broadcast proxy re-encryption[J]. IEEE Transactions on Vehicular Technology, 2020, 69(5): 5610-5617. [18] Zhao Y N, Wang Y P, Liang Y H, et al. Identity-based broadcast signcryption scheme for vehicular platoon communication[J]. IEEE Transactions on Industrial Informatics, 2023, 19(6): 7814-7824. [19] Kim J, Susilo W, Au M H, et al. Adaptively secure identity-based broadcast encryption with a constant-sized ciphertext[J]. IEEE Transactions on Information Forensics and Security, 2015, 10(3): 679-693. [20] Deng H, Qin Z, Wu Q H, et al. Identity-based encryption transformation for flexible sharing of encrypted data in public cloud[J]. IEEE Transactions on Information Forensics and Security, 2020, 15: 3168-3180. [21] Chen L Q, Zhang M, Li J G. Conditional identity-based broadcast proxy re-encryption with anonymity and revocation[J]. IEEE Transactions on Reliability, 2025, 74(3): 3573-3584. [22] Zhong H, Zhang S, Cui J, et al. Broadcast encryption scheme for V2I communication in VANETs[J]. IEEE Transactions on Vehicular Technology, 2022, 71(3): 2749-2760. [23] Zhou Y J, Cao Z F, Dong X L. Dynamic identity-based broadcast proxy re-encryption for data sharing in autonomous vehicles[J]. Transactions on Emerging Telecommunications Technologies, 2023, 34(11): e4801. [24] Ge C P, Liu Z, Xia J Y, et al. Revocable identity-based broadcast proxy re-encryption for data sharing in clouds[J]. IEEE Transactions on Dependable and Secure Computing, 2021, 18(3): 1214-1226. [25] Delerablée C. Identity-based broadcast encryption with constant size ciphertexts and private keys[C]// Proceedings of the Advances in Cryptology-ASIACRYPT 2007. Berlin: Springer, 2007: 200-215. -
下载:
点击查看大图
计量
- 文章访问数: 203
- HTML全文浏览量: 116
- PDF下载量: 20
- 被引次数: 0
