Shengzhou Hu , Longjian Huang, Tingting Zhong, Xunjun Chen, Baolei Li, Wenhao Li, Bohai Wen
Received: 2023-08-03; Revised: 2023-11-09; Accepted: 2024-11-14; Online: 2024-12-13
The personal growth profile (PGP) is an important document for providing someone’s comprehensive quality proof by recording physical health, academic performance, quality level, integrity record, etc. PGPs are widely used in many scenarios, such as applying for jobs, checking enrollment qualifications, evaluating personal credit, etc. The traditional management of PGP has many problems, such as highly centralized data processing, insecure credential sharing and inconvenient off-line credential verification, etc. To solve these issues, the paper presents a blockchain-based certificateless attribute-based searchable encryption scheme (BB-CL-AB-SE) for encrypting, delivering, requesting, and using PGPs. In the scheme, a consortium blockchain with decentralized centers and tamper-proof features is constructed to securely share PGPs and trace the responsibilities of authorities, key generation centers, data users, and data generators in a cloud environment. In order to enhance PGP’s owner ship of data provider and data owner, the certificateless encryption technology is adopted to establish legal roles whose partial key mastered by themselves and produce ciphertext keyword and data user’s trapdoor key in ciphertext keyword retrieval process. Attribute-based encryption technology is used to encrypt the symmetric keys for protecting the confidentiality of PGP and realizes fine-grained access policies. Cloud storage provider checks user’s legitimacy before providing encrypted PGPs. The scheme provides the ciphertext keyword retrieval function and flexible access policy and can resist key escrow in protecting user’s PGP. The scheme also obtains the transparency, traceability, and anti-tampering of blockchain. The BB-CL-AB-SE scheme makes PGP’s management more real, credible, and easy to operate. The security proof and the experiment result illustrate the scheme is secure and has good computing performance.