The invention belongs to the technical field of quantum communication, and discloses a cloud data semi-quantum security sharing method and system based on proxy re-encryption, and the method comprisesthe steps: enabling an authorization end to generate a binary random number through a quantum random number generator, encrypting binary data through the random number, and storing the binary data into a cloud server; enabling the authorization end and the cloud server to share a binary key through a quantum key distribution protocol; enabling the authorization end to use a random number to encrypt the shared key as a conversion key and send the conversion key to the cloud server; and enabling the cloud server to use the shared key encryption conversion key as a final conversion key, and usethe final conversion key to convert the encrypted data stored in the cloud server into secret data which can be shared by the receiving end, and enabling the receiving end to decrypt the secret data by using the own key to perform data sharing. Compared with some quantum secret sharing schemes based on an entangled state or quantum computing, the loud data semi-quantum security sharing method andsystem do not need to prepare a multi-particle entangled state, and do not need quantum Fourier transform and a d-level quantum system, thereby reducing the complexity and difficulty of implementation.

Cloud data semi-quantum security sharing method and system based on proxy re-encryption

The invention discloses a proxy re-encryption system and a method capable of resisting quantum attacks. First, a system public parameter is generated by a system parameter generation module. The secret key generation module generates public and private secret key pairs for employees authorized to process data needing to be encrypted in a company, and the employee i encrypts the processed data anduploads the encrypted data to the cloud server. When the employee j needs to check the data; authorization, a re-encryption key can be generated by a cloud server, an employee i and an employee j according to a re-encryption key protocol; and the cloud server performs re-encryption processing on the data by using the re-encryption key to obtain a re-encrypted ciphertext, and then the cloud serversends the re-encrypted ciphertext to the employee j, so that the employee j can decrypt the re-encrypted ciphertext by using a private key of the employee j to obtain the data. According to the method, an NTRU encryption system based on the lattice difficulty problem is adopted, quantum attacks can be effectively resisted, a unique re-encryption protocol is designed, collusion attacks can be resisted, and only one-way re-encryption can be achieved.

Du Lin

Papers

Anti-quantum-attack proxy re-encryption system and method