Open Access
SM9-ENHANCED KEY-POLICY ATTRIBUTE-BASED ENCRYPTION: DESIGN, ANALYSIS, AND APPLICATIONS
4
Institute of Computing, University of Campinas (UNICAMP), Brazil
Abstract
The proliferation of sensitive data in distributed environments, such as cloud computing and the Internet of Things (IoT), necessitates advanced cryptographic solutions capable of providing fine-grained access control. Attribute-Based Encryption (ABE) has emerged as a promising primitive for this purpose, enabling access decisions based on user attributes and policies rather than fixed identities. Concurrently, China's SM9 cryptographic standard offers an efficient identity-based encryption framework that streamlines key management by eliminating the need for complex Public Key Infrastructure (PKI). This report explores the integration of Key-Policy Attribute-Based Encryption (KP-ABE) with the SM9 standard. It delves into the foundational principles of ABE and SM9, details the construction of representative SM9-based KP-ABE schemes, and analyzes their security properties, performance characteristics, and practical applications. Key challenges, including revocation, key escrow, and quantum resistance, are also discussed, highlighting avenues for future research to further enhance the utility and robustness of these cryptographic systems for secure data sharing in dynamic environments.
Keywords
SM9,
key-policy attribute-based encryption,
KP-ABE,
cryptographic schemes
References
Fiat A, Naor M. Broadcast encryption. In Proc. the 13th Annual International Cryptology Conference on Advances in Cryptology, Aug. 1993, pp. 480β491. DOI: 10.1007/3-540-48329-2_40.
Sahai A, Waters B. Fuzzy identity-based encryption. In Proc. the 24th Annual International Conference on the Theory and Applications of Cryptographic Techniques, May 2005, pp. 457β473. DOI: 10.1007/11426639_27.
Goyal V, Pandey O, Sahai A, Waters B. Attribute-based encryption for fine-grained access control of encrypted data. In Proc. the 13th ACM Conference on Computer and Communications Security, Oct. 30βNov. 3, 2006, pp. 89β98. DOI: 10.1145/1180405.1180418.
Lai J C, Huang X Y, He D B. An efficient identity-based broadcast encryption scheme based on SM9. Chinese Journal of Computers, 2021, 44(5): 897β907. DOI: 10.11897/SP.J.1016.2021.00897. (in Chinese)
Sun S, Ma H, Zhang R, Xu W. Server-aided immediate and robust user revocation mechanism for SM9. Cybersecurity, 2022, 3(1): Article No. 12. DOI: 10.1186/S42400-020-00054-6.
Cheng Z. Security analysis of SM9 key agreement and encryption. In Proc. the 14th International Conference on Information Security and Cryptology, Dec. 2018, pp. 3β25. DOI: 10.1007/978-3-030-14234-6_1.
Fujisaki E, Okamoto T. Secure integration of asymmetric and symmetric encryption schemes. In Proc. the 19th Annual International Cryptology Conference on Advances in Cryptology, Aug. 1999, pp. 537β554. DOI: 10.1007/3-540-48405-1_34.
Boneh D, Boyen X. Efficient selective-ID secure identity-based encryption without random oracles. In Proc. the 2004 International Conference on the Theory and Applications of Cryptographic Techniques, May 2004, pp. 223β238. DOI: 10.1007/978-3-540-24676-3_14.
Shamir A. Identity-based cryptosystems and signature schemes. In Advances in Cryptology, Blakley G R, Chaum D (eds.), Springer, 1985, pp. 47β53. DOI: 10.1007/3-540-39568-7_5.
Boneh D, Franklin M. Identity-based encryption from the Weil pairing. In Proc. the 21st Annual International Cryptology Conference on Advances in Cryptology, Aug. 2001, pp. 213β229. DOI: 10.1007/3-540-44647-8_13.
Canetti R, Halevi S, Katz J. A forward-secure public-key encryption scheme. In Proc. the 2003 International Conference on the Theory and Applications of Cryptographic Techniques, May 2003, pp. 255β271. DOI: 10.1007/3-540-39200-9_16.
Park J H, Lee K, Lee D H. New chosen-ciphertext secure identity-based encryption with tight security reduction to the bilinear Diffie-Hellman problem. Information Sciences, 2015, 325: 256β270. DOI: 10.1016/J.INS.2015.07.011.
Ma S. Identity-based encryption with outsourced equality test in cloud computing. Information Sciences, 2016, 328: 389β402. DOI: 10.1016/J.INS.2015.08.053.
Bethencourt J, Sahai A, Waters B. Ciphertext-policy attribute-based encryption. In Proc. the 2007 IEEE Symposium on Security and Privacy, May 2007, pp. 321β334. DOI: 10.1109/SP.2007.11.
Ostrovsky R, Sahai A, Waters B. Attribute-based encryption with non-monotonic access structures. In Proc. the 14th ACM Conference on Computer and Communications Security, Oct. 31βNov. 2, 2007, pp. 195β203. DOI: 10.1145/1315245.1315270.
Garg S, Gentry C, Halevi S, Sahai A, Waters B. Attribute-based encryption for circuits from multilinear maps. In Proc. the 33rd Annual Cryptology Conference on Advances in Cryptology, Aug. 2013, pp. 479β499. DOI: 10.1007/978-3-642-40084-1_27.
Tiplea F L, DrΔgan C C. Key-policy attribute-based encryption for Boolean circuits from bilinear maps. In Proc. the 1st International Conference on Cryptography and Information Security in the Balkans, Oct. 2014, pp. 175β193. DOI: 10.1007/978-3-319-21356-9_12.
DrΔgan C C, Tiplea F L. Key-policy attribute-based encryption for general Boolean circuits from secret sharing and multi-linear maps. In Proc. the 2nd International Conference on Cryptography and Information Security in the Balkans, Sept. 2015, pp. 112β133. DOI: 10.1007/978-3-319-29172-7_8.
Hu P, Gao H. A key-policy attribute-based encryption scheme for general circuit from bilinear maps. International Journal of Network Security, 2017, 19(5): 704β710. DOI: 10.6633/IJNS.201709.19(5).07.
Bolocan D. Key-policy attribute-based encryption scheme for general circuits. Proceedings of the Romanian Academy, Series A, 2020, 21(1): 11β19.
Li C, Shen Q, Xie Z, Dong J, Feng X, Fang Y, Wu Z. Hierarchical and non-monotonic key-policy attribute-based encryption and its application. Information Sciences, 2022, 611: 591β627. DOI: 10.1016/J.INS.2022.08.014.
Lewko A, Waters B. Unbounded HIBE and attribute-based encryption. In Proc. the 30th Annual International Conference on the Theory and Applications of Cryptographic Techniques, May 2011, pp. 547β567. DOI: 10.1007/978-3-642-20465-4_30.
Lewko A. Tools for simulating features of composite order bilinear groups in the prime order setting. In Proc. the 31st Annual International Conference on the Theory and Applications of Cryptographic Techniques, Apr. 2012, pp. 318β335. DOI: 10.1007/978-3-642-29011-4_20.
Okamoto T, Takashima K. Fully secure unbounded inner-product and attribute-based encryption. In Proc. the 18th International Conference on the Theory and Application of Cryptology and Information Security, Dec. 2012, pp. 349β366. DOI: 10.1007/978-3-642-34961-4_22.
Ma H, Peng T, Liu Z. Directly revocable and verifiable key-policy attribute-based encryption for large universe. International Journal of Network Security, 2017, 19(2): 272β284. DOI: 10.6633/IJNS.201703.19(2).12.
Ye Y, Cao Z, Shen J. Unbounded key-policy attribute-based encryption with black-box traceability. In Proc. the 19th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, Dec. 29βJan. 1, 2020, pp. 1655β1663. DOI: 10.1109/TrustCom50675.2020.00228.
Attrapadung N, Libert B, de Panafieu E. Expressive key-policy attribute-based encryption with constant-size ciphertexts. In Proc. the 14th International Conference on Practice and Theory in Public Key Cryptography, Mar. 2011, pp. 90β108. DOI: 10.1007/978-3-642-19379-8_6.
Hohenberger S, Waters B. Attribute-based encryption with fast decryption. In Proc. the 16th International Conference on Practice and Theory in Public-Key Cryptography, Feb. 26βMar. 1, 2013, pp. 162β179. DOI: 10.1007/978-3-642-36362-7_11.
Lai J, Deng R H, Li Y, Weng J. Fully secure key-policy attribute-based encryption with constant-size ciphertexts and fast decryption. In Proc. the 9th ACM Symposium on Information, Computer and Communications Security, Jun. 2014, pp. 239β248. DOI: 10.1145/2590296.2590334.
Zhang K, Gong J, Tang S, Chen J, Li X, Qian H, Cao Z. Practical and efficient attribute-based encryption with constant-size ciphertexts in outsourced verifiable computation. In Proc. the 11th ACM on Asia Conference on Computer and Communications Security, May 30βJun. 3, 2016, pp. 269β279. DOI: 10.1145/2897845.2897858.
Kim J, Susilo W, Guo F, Au M H, Nepal S. An efficient KP-ABE with short ciphertexts in prime order groups under standard assumption. In Proc. the 2017 ACM on Asia Conference on Computer and Communications Security, Apr. 2017, pp. 823β834. DOI: 10.1145/3052973.3053003.
Rao Y S, Dutta R. Computational friendly attribute-based encryptions with short ciphertext. Theoretical Computer Science, 2017, 668: 1β26. DOI: 10.1016/J.TCS.2016.12.030.
Obiri I A, Xia Q, Xia H, Obour Agyekum K O B, Asamoah K O, Sifah E B, Zhang X, Gao J. A fully secure KP-ABE scheme on prime-order bilinear groups through selective techniques. Security and Communication Networks, 2020, 2020: 8869057. DOI: 10.1155/2020/8869057.
Boucenna F, Nouali O, Kechid S, Tahar Kechadi M. Secure inverted index based search over encrypted cloud data with user access rights management. Journal of Computer Science and Technology, 2019, 34(1): 133β154. DOI: 10.1007/S11390-019-1903-2.
Xue L, Yu Y, Li Y, Au M H, Du X, Yang B. Efficient attribute-based encryption with attribute revocation for assured data deletion. Information Sciences, 2019, 479: 640β650. DOI: 10.1016/J.INS.2018.02.015.
You L, Wang L. Hierarchical authority key-policy attribute-based encryption. In Proc. the 16th International Conference on Communication Technology (ICCT), Oct. 2015, pp. 868β872. DOI: 10.1109/ICCT.2015.7399963.
Lai J, Huang X, He D, Guo F. An efficient hierarchical identity-based encryption based on SM9. SCIENTIA SINICA Informationis, 2023, 53(5): 918β930. DOI: 10.1360/SSI-2022-0163. (in Chinese)
Tang F, Ling G W, Shan J Y. Additive homomorphic encryption schemes based on SM2 and SM9. Journal of Cryptologic Research, 2022, 9(3): 535β549. DOI: 10.13868/j.cnki.jcr.000532. (in Chinese)
Shi Y, Ma Z, Qin R, Wang X, Wei W, Fan H. Implementation of an attribute-based encryption scheme based on SM9. Applied Sciences, 2019, 9(15): 3074. DOI: 10.3390/app9153074.
Ji H, Zhang H, Shao L, He D, Luo M. An efficient attribute-based encryption scheme based on SM9 encryption algorithm for dispatching and control cloud. Connection Science, 2021, 33(4): 1094β1115. DOI: 10.1080/09540091.2020.1858757.
Chen L, Cheng Z. Security proof of Sakai-Kasahara's identity-based encryption scheme. In Proc. the 10th IMA International Conference on Cryptography and Coding, Dec. 2005, pp. 442β459. DOI: 10.1007/11586821_29.
DelerablΓ©e C. Identity-based broadcast encryption with constant size ciphertexts and private keys. In Proc. the 13th International Conference on the Theory and Application of Cryptology and Information Security, Dec. 2007, pp. 200β215. DOI: 10.1007/978-3-540-76900-2_12.
Boneh D, Boyen X, Goh E J. Hierarchical identity based encryption with constant size ciphertext. In Proc. the 24th Annual International Conference on the Theory and Applications of Cryptographic Techniques, May 2005, pp. 440β456. DOI: 10.1007/11426639_26.
Most read articles by the same author(s)
- Mohammad Shuab Siddique , Debugging Billion-Core AI Clusters: Distributed Crash Diagnosis for Heterogeneous Accelerator Systems , International Journal of Modern Computer Science and IT Innovations: Vol. 3 No. 09 (2026): Volume 03 Issue 09
- Martin Schneider, Diego MartΓnez, A Comparative Benchmark Analysis of Transactional and Analytical Performance in PostgreSQL and MySQL , International Journal of Modern Computer Science and IT Innovations: Vol. 2 No. 10 (2025): Volume 02 Issue 10
- Mr. Raman Kumar, Intelligent Supply Chain Management Using Artificial Intelligence: Models, Challenges, And Future Prospects , International Journal of Modern Computer Science and IT Innovations: Vol. 3 No. 09 (2026): Volume 03 Issue 09
- Chinedu Emmanuel Okafor, A Comprehensive Architecture for Enhancing IoT Security Through Zero Trust Principles , International Journal of Modern Computer Science and IT Innovations: Vol. 3 No. 09 (2026): Volume 03 Issue 09
- Mr. Sachin Manekar, A Survey of Retrieval-Augmented Language Models for Knowledge-Intensive Text Applications , International Journal of Modern Computer Science and IT Innovations: Vol. 3 No. 09 (2026): Volume 03 Issue 09
- Serhii Yakhin , Resilience and Scale in .NET Microservices via Message Brokers for Ensuring Fault Tolerance and Scalability in .NET Microservices , International Journal of Modern Computer Science and IT Innovations: Vol. 3 No. 09 (2026): Volume 03 Issue 09
- Adrian Miguel Santos, Clarisse Mae Reyes, Integrated Analytical Approaches in Computer Science and Information Technology Systems , International Journal of Modern Computer Science and IT Innovations: Vol. 3 No. 09 (2026): Volume 03 Issue 09
- Dr. Elena R. Moretti, Intent-Aware Decentralized Identity and Zero-Trust Framework for Agentic AI Workloads , International Journal of Modern Computer Science and IT Innovations: Vol. 2 No. 11 (2025): Volume 02 Issue 11
- Dr. Ahmed R. Mostafa, Prof. Mahmoud A. Taha, AFFORDABLE VISION-BASED SYSTEMS FOR REAL-TIME CHESSBOARD DIGITIZATION , International Journal of Modern Computer Science and IT Innovations: Vol. 2 No. 01 (2025): Volume 02 Issue 01
- Rahul van Dijk, Advancing Circular Business Models through Big Data and Technological Integration: Pathways for Sustainable Value Creation , International Journal of Modern Computer Science and IT Innovations: Vol. 2 No. 12 (2025): Volume 02 Issue 12
Similar Articles
- Dr. Rohan Verma, Dr. Sneha Kulkarni, Machine-Learning Architectures enabling Human Trait Verification Alternatives within Risk-Coverage Ecosystems: Resilient Identity Validation, Policy Adherence , International Journal of Modern Computer Science and IT Innovations: Vol. 3 No. 02 (2026): Volume 03 Issue 02
- Dr. Chinedu Okafor, Dr. Amina Ibrahim Bello, Preparing National Security Systems for the Quantum Era: A Roadmap for Post-Quantum Cryptographic Migration , International Journal of Modern Computer Science and IT Innovations: Vol. 3 No. 08 (2026): Volume 03 Issue 08
- Dr. Nurul H. Zulkifli, Dr. Farah M. Rahimi, ACCOUNTABLE DATA AUTHORIZATION IN CLOUD ENVIRONMENTS: AN IDENTITY-BASED ENCRYPTION FRAMEWORK WITH EQUALITY TESTING , International Journal of Modern Computer Science and IT Innovations: Vol. 2 No. 01 (2025): Volume 02 Issue 01
- Dr Chintal Kumar Patel, A Comprehensive Review of User Authentication and Authorization Techniques in Cloud Computing , International Journal of Modern Computer Science and IT Innovations: Vol. 3 No. 08 (2026): Volume 03 Issue 08
- Dr. Eleanor Whitfield, Architecting Secure and Cost-Optimized Iot-Cloud Ecosystems: Integrating AI-Driven Intrusion Detection, Multi-Path Routing, And Intelligent Workload Scheduling in Distributed Systems , International Journal of Modern Computer Science and IT Innovations: Vol. 3 No. 01 (2026): Volume 03 Issue 01
- Hiroshi Tanaka, Architectural Synergies: Integrating Blockchain, Fog Computing, And Generative Intelligence for Secure Digital Twin Ecosystems in Cyber-Physical Systems , International Journal of Modern Computer Science and IT Innovations: Vol. 3 No. 02 (2026): Volume 03 Issue 02
- Mykola Nesvietaiev, Multisided Digital Platforms in the Sphere of Family Well-Being: Models for Balancing the Interests of Children, Parents, and Service Providers Under Regulatory Requirements for the Protection of Minors , International Journal of Modern Computer Science and IT Innovations: Vol. 2 No. 03 (2025): Volume 02 Issue 03
- Vivek Sharma, Survey of Secure Workload Scheduling and Management in Cloud Computing Systems , International Journal of Modern Computer Science and IT Innovations: Vol. 3 No. 07 (2026): Volume 03 Issue 07
You may also start an advanced similarity search for this article.