Open Access
SM9-ENHANCED KEY-POLICY ATTRIBUTE-BASED ENCRYPTION: DESIGN, ANALYSIS, AND APPLICATIONS
4
Institute of Computing, University of Campinas (UNICAMP), Brazil
Abstract
The proliferation of sensitive data in distributed environments, such as cloud computing and the Internet of Things (IoT), necessitates advanced cryptographic solutions capable of providing fine-grained access control. Attribute-Based Encryption (ABE) has emerged as a promising primitive for this purpose, enabling access decisions based on user attributes and policies rather than fixed identities. Concurrently, China's SM9 cryptographic standard offers an efficient identity-based encryption framework that streamlines key management by eliminating the need for complex Public Key Infrastructure (PKI). This report explores the integration of Key-Policy Attribute-Based Encryption (KP-ABE) with the SM9 standard. It delves into the foundational principles of ABE and SM9, details the construction of representative SM9-based KP-ABE schemes, and analyzes their security properties, performance characteristics, and practical applications. Key challenges, including revocation, key escrow, and quantum resistance, are also discussed, highlighting avenues for future research to further enhance the utility and robustness of these cryptographic systems for secure data sharing in dynamic environments.
Keywords
SM9,
key-policy attribute-based encryption,
KP-ABE,
cryptographic schemes
References
Fiat A, Naor M. Broadcast encryption. In Proc. the 13th Annual International Cryptology Conference on Advances in Cryptology, Aug. 1993, pp. 480β491. DOI: 10.1007/3-540-48329-2_40.
Sahai A, Waters B. Fuzzy identity-based encryption. In Proc. the 24th Annual International Conference on the Theory and Applications of Cryptographic Techniques, May 2005, pp. 457β473. DOI: 10.1007/11426639_27.
Goyal V, Pandey O, Sahai A, Waters B. Attribute-based encryption for fine-grained access control of encrypted data. In Proc. the 13th ACM Conference on Computer and Communications Security, Oct. 30βNov. 3, 2006, pp. 89β98. DOI: 10.1145/1180405.1180418.
Lai J C, Huang X Y, He D B. An efficient identity-based broadcast encryption scheme based on SM9. Chinese Journal of Computers, 2021, 44(5): 897β907. DOI: 10.11897/SP.J.1016.2021.00897. (in Chinese)
Sun S, Ma H, Zhang R, Xu W. Server-aided immediate and robust user revocation mechanism for SM9. Cybersecurity, 2022, 3(1): Article No. 12. DOI: 10.1186/S42400-020-00054-6.
Cheng Z. Security analysis of SM9 key agreement and encryption. In Proc. the 14th International Conference on Information Security and Cryptology, Dec. 2018, pp. 3β25. DOI: 10.1007/978-3-030-14234-6_1.
Fujisaki E, Okamoto T. Secure integration of asymmetric and symmetric encryption schemes. In Proc. the 19th Annual International Cryptology Conference on Advances in Cryptology, Aug. 1999, pp. 537β554. DOI: 10.1007/3-540-48405-1_34.
Boneh D, Boyen X. Efficient selective-ID secure identity-based encryption without random oracles. In Proc. the 2004 International Conference on the Theory and Applications of Cryptographic Techniques, May 2004, pp. 223β238. DOI: 10.1007/978-3-540-24676-3_14.
Shamir A. Identity-based cryptosystems and signature schemes. In Advances in Cryptology, Blakley G R, Chaum D (eds.), Springer, 1985, pp. 47β53. DOI: 10.1007/3-540-39568-7_5.
Boneh D, Franklin M. Identity-based encryption from the Weil pairing. In Proc. the 21st Annual International Cryptology Conference on Advances in Cryptology, Aug. 2001, pp. 213β229. DOI: 10.1007/3-540-44647-8_13.
Canetti R, Halevi S, Katz J. A forward-secure public-key encryption scheme. In Proc. the 2003 International Conference on the Theory and Applications of Cryptographic Techniques, May 2003, pp. 255β271. DOI: 10.1007/3-540-39200-9_16.
Park J H, Lee K, Lee D H. New chosen-ciphertext secure identity-based encryption with tight security reduction to the bilinear Diffie-Hellman problem. Information Sciences, 2015, 325: 256β270. DOI: 10.1016/J.INS.2015.07.011.
Ma S. Identity-based encryption with outsourced equality test in cloud computing. Information Sciences, 2016, 328: 389β402. DOI: 10.1016/J.INS.2015.08.053.
Bethencourt J, Sahai A, Waters B. Ciphertext-policy attribute-based encryption. In Proc. the 2007 IEEE Symposium on Security and Privacy, May 2007, pp. 321β334. DOI: 10.1109/SP.2007.11.
Ostrovsky R, Sahai A, Waters B. Attribute-based encryption with non-monotonic access structures. In Proc. the 14th ACM Conference on Computer and Communications Security, Oct. 31βNov. 2, 2007, pp. 195β203. DOI: 10.1145/1315245.1315270.
Garg S, Gentry C, Halevi S, Sahai A, Waters B. Attribute-based encryption for circuits from multilinear maps. In Proc. the 33rd Annual Cryptology Conference on Advances in Cryptology, Aug. 2013, pp. 479β499. DOI: 10.1007/978-3-642-40084-1_27.
Tiplea F L, DrΔgan C C. Key-policy attribute-based encryption for Boolean circuits from bilinear maps. In Proc. the 1st International Conference on Cryptography and Information Security in the Balkans, Oct. 2014, pp. 175β193. DOI: 10.1007/978-3-319-21356-9_12.
DrΔgan C C, Tiplea F L. Key-policy attribute-based encryption for general Boolean circuits from secret sharing and multi-linear maps. In Proc. the 2nd International Conference on Cryptography and Information Security in the Balkans, Sept. 2015, pp. 112β133. DOI: 10.1007/978-3-319-29172-7_8.
Hu P, Gao H. A key-policy attribute-based encryption scheme for general circuit from bilinear maps. International Journal of Network Security, 2017, 19(5): 704β710. DOI: 10.6633/IJNS.201709.19(5).07.
Bolocan D. Key-policy attribute-based encryption scheme for general circuits. Proceedings of the Romanian Academy, Series A, 2020, 21(1): 11β19.
Li C, Shen Q, Xie Z, Dong J, Feng X, Fang Y, Wu Z. Hierarchical and non-monotonic key-policy attribute-based encryption and its application. Information Sciences, 2022, 611: 591β627. DOI: 10.1016/J.INS.2022.08.014.
Lewko A, Waters B. Unbounded HIBE and attribute-based encryption. In Proc. the 30th Annual International Conference on the Theory and Applications of Cryptographic Techniques, May 2011, pp. 547β567. DOI: 10.1007/978-3-642-20465-4_30.
Lewko A. Tools for simulating features of composite order bilinear groups in the prime order setting. In Proc. the 31st Annual International Conference on the Theory and Applications of Cryptographic Techniques, Apr. 2012, pp. 318β335. DOI: 10.1007/978-3-642-29011-4_20.
Okamoto T, Takashima K. Fully secure unbounded inner-product and attribute-based encryption. In Proc. the 18th International Conference on the Theory and Application of Cryptology and Information Security, Dec. 2012, pp. 349β366. DOI: 10.1007/978-3-642-34961-4_22.
Ma H, Peng T, Liu Z. Directly revocable and verifiable key-policy attribute-based encryption for large universe. International Journal of Network Security, 2017, 19(2): 272β284. DOI: 10.6633/IJNS.201703.19(2).12.
Ye Y, Cao Z, Shen J. Unbounded key-policy attribute-based encryption with black-box traceability. In Proc. the 19th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, Dec. 29βJan. 1, 2020, pp. 1655β1663. DOI: 10.1109/TrustCom50675.2020.00228.
Attrapadung N, Libert B, de Panafieu E. Expressive key-policy attribute-based encryption with constant-size ciphertexts. In Proc. the 14th International Conference on Practice and Theory in Public Key Cryptography, Mar. 2011, pp. 90β108. DOI: 10.1007/978-3-642-19379-8_6.
Hohenberger S, Waters B. Attribute-based encryption with fast decryption. In Proc. the 16th International Conference on Practice and Theory in Public-Key Cryptography, Feb. 26βMar. 1, 2013, pp. 162β179. DOI: 10.1007/978-3-642-36362-7_11.
Lai J, Deng R H, Li Y, Weng J. Fully secure key-policy attribute-based encryption with constant-size ciphertexts and fast decryption. In Proc. the 9th ACM Symposium on Information, Computer and Communications Security, Jun. 2014, pp. 239β248. DOI: 10.1145/2590296.2590334.
Zhang K, Gong J, Tang S, Chen J, Li X, Qian H, Cao Z. Practical and efficient attribute-based encryption with constant-size ciphertexts in outsourced verifiable computation. In Proc. the 11th ACM on Asia Conference on Computer and Communications Security, May 30βJun. 3, 2016, pp. 269β279. DOI: 10.1145/2897845.2897858.
Kim J, Susilo W, Guo F, Au M H, Nepal S. An efficient KP-ABE with short ciphertexts in prime order groups under standard assumption. In Proc. the 2017 ACM on Asia Conference on Computer and Communications Security, Apr. 2017, pp. 823β834. DOI: 10.1145/3052973.3053003.
Rao Y S, Dutta R. Computational friendly attribute-based encryptions with short ciphertext. Theoretical Computer Science, 2017, 668: 1β26. DOI: 10.1016/J.TCS.2016.12.030.
Obiri I A, Xia Q, Xia H, Obour Agyekum K O B, Asamoah K O, Sifah E B, Zhang X, Gao J. A fully secure KP-ABE scheme on prime-order bilinear groups through selective techniques. Security and Communication Networks, 2020, 2020: 8869057. DOI: 10.1155/2020/8869057.
Boucenna F, Nouali O, Kechid S, Tahar Kechadi M. Secure inverted index based search over encrypted cloud data with user access rights management. Journal of Computer Science and Technology, 2019, 34(1): 133β154. DOI: 10.1007/S11390-019-1903-2.
Xue L, Yu Y, Li Y, Au M H, Du X, Yang B. Efficient attribute-based encryption with attribute revocation for assured data deletion. Information Sciences, 2019, 479: 640β650. DOI: 10.1016/J.INS.2018.02.015.
You L, Wang L. Hierarchical authority key-policy attribute-based encryption. In Proc. the 16th International Conference on Communication Technology (ICCT), Oct. 2015, pp. 868β872. DOI: 10.1109/ICCT.2015.7399963.
Lai J, Huang X, He D, Guo F. An efficient hierarchical identity-based encryption based on SM9. SCIENTIA SINICA Informationis, 2023, 53(5): 918β930. DOI: 10.1360/SSI-2022-0163. (in Chinese)
Tang F, Ling G W, Shan J Y. Additive homomorphic encryption schemes based on SM2 and SM9. Journal of Cryptologic Research, 2022, 9(3): 535β549. DOI: 10.13868/j.cnki.jcr.000532. (in Chinese)
Shi Y, Ma Z, Qin R, Wang X, Wei W, Fan H. Implementation of an attribute-based encryption scheme based on SM9. Applied Sciences, 2019, 9(15): 3074. DOI: 10.3390/app9153074.
Ji H, Zhang H, Shao L, He D, Luo M. An efficient attribute-based encryption scheme based on SM9 encryption algorithm for dispatching and control cloud. Connection Science, 2021, 33(4): 1094β1115. DOI: 10.1080/09540091.2020.1858757.
Chen L, Cheng Z. Security proof of Sakai-Kasahara's identity-based encryption scheme. In Proc. the 10th IMA International Conference on Cryptography and Coding, Dec. 2005, pp. 442β459. DOI: 10.1007/11586821_29.
DelerablΓ©e C. Identity-based broadcast encryption with constant size ciphertexts and private keys. In Proc. the 13th International Conference on the Theory and Application of Cryptology and Information Security, Dec. 2007, pp. 200β215. DOI: 10.1007/978-3-540-76900-2_12.
Boneh D, Boyen X, Goh E J. Hierarchical identity based encryption with constant size ciphertext. In Proc. the 24th Annual International Conference on the Theory and Applications of Cryptographic Techniques, May 2005, pp. 440β456. DOI: 10.1007/11426639_26.
Most read articles by the same author(s)
- Puspita Sari, Nathanael Sianipar, A DESIGN SCIENCE APPROACH TO MITIGATING INTER-SERVICE INTEGRATION FAILURES IN MICROSERVICE ARCHITECTURES: THE CONSUMER-DRIVEN CONTRACT TESTING FRAMEWORK AND PILOT IMPLEMENTATION , International Journal of Modern Computer Science and IT Innovations: Vol. 2 No. 10 (2025): Volume 02 Issue 10
- Dr. Adrian K. Varela, Edge Intelligence-Driven Intrusion Detection for Internet of Things Networks in Next-Generation Communication Systems , International Journal of Modern Computer Science and IT Innovations: Vol. 3 No. 03 (2026): Volume03 Issue03
- Serhii Svynarov, AI-Driven Automation in Cloud-Based Business Systems: A Practical Implementation Using Microservices Architecture , International Journal of Modern Computer Science and IT Innovations: Vol. 3 No. 05 (2026): Volume 03 Issue 05
- Oleksandr Orlov, Engineering Compliant Enterprise Systems: Architectural Constraints and Quality Practices in Regulated Industries , International Journal of Modern Computer Science and IT Innovations: Vol. 3 No. 07 (2026): Volume 03 Issue 07
- Pedro C. Almeida, Prof. Laura B. Heinrich, LOCAL NODE COMPENSATION FOR ENHANCED STABILITY IN DISTRIBUTED SIGNED NETWORKS , International Journal of Modern Computer Science and IT Innovations: Vol. 2 No. 04 (2025): Volume 02 Issue 04
- Dr. Rohan S. Whitaker, Predictive and Intelligent HVAC Systems: Integrative Frameworks for Performance, Maintenance, and Energy Optimization , International Journal of Modern Computer Science and IT Innovations: Vol. 2 No. 10 (2025): Volume 02 Issue 10
- Chinedu Okafor, Amara Eze, An Adaptive AI Multi-Agent Model for Optimizing Real-Time Data Streaming and System Resilience , International Journal of Modern Computer Science and IT Innovations: Vol. 3 No. 08 (2026): Volume 03 Issue 08
- Dr. Nilesh Jain, Autonomous Security Validation Across Cloud, Edge, And IOT Ecosystems: A Review , International Journal of Modern Computer Science and IT Innovations: Vol. 3 No. 07 (2026): Volume 03 Issue 07
- Daniela Costa, Rafael Lima, Dynamic Deep Neural Network Partitioning For Low-Latency Edge-Assisted Video Analytics: A Learning-To-Partition Approach , International Journal of Modern Computer Science and IT Innovations: Vol. 2 No. 10 (2025): Volume 02 Issue 10
- Dr. Andika Prasetyo, Siti Rahmawati, M.Sc., Rizky Maulana, Structured Teaching Framework Focused on Beginner-Level Software Development Skills , International Journal of Modern Computer Science and IT Innovations: Vol. 3 No. 04 (2026): Volume 03 Issue 04
Similar Articles
- Dr. Rohan Verma, Dr. Sneha Kulkarni, Machine-Learning Architectures enabling Human Trait Verification Alternatives within Risk-Coverage Ecosystems: Resilient Identity Validation, Policy Adherence , International Journal of Modern Computer Science and IT Innovations: Vol. 3 No. 02 (2026): Volume 03 Issue 02
- Dr. Chinedu Okafor, Dr. Amina Ibrahim Bello, Preparing National Security Systems for the Quantum Era: A Roadmap for Post-Quantum Cryptographic Migration , International Journal of Modern Computer Science and IT Innovations: Vol. 3 No. 08 (2026): Volume 03 Issue 08
- Dr. Nurul H. Zulkifli, Dr. Farah M. Rahimi, ACCOUNTABLE DATA AUTHORIZATION IN CLOUD ENVIRONMENTS: AN IDENTITY-BASED ENCRYPTION FRAMEWORK WITH EQUALITY TESTING , International Journal of Modern Computer Science and IT Innovations: Vol. 2 No. 01 (2025): Volume 02 Issue 01
- Dr Chintal Kumar Patel, A Comprehensive Review of User Authentication and Authorization Techniques in Cloud Computing , International Journal of Modern Computer Science and IT Innovations: Vol. 3 No. 08 (2026): Volume 03 Issue 08
- Dr. Eleanor Whitfield, Architecting Secure and Cost-Optimized Iot-Cloud Ecosystems: Integrating AI-Driven Intrusion Detection, Multi-Path Routing, And Intelligent Workload Scheduling in Distributed Systems , International Journal of Modern Computer Science and IT Innovations: Vol. 3 No. 01 (2026): Volume 03 Issue 01
- Hiroshi Tanaka, Architectural Synergies: Integrating Blockchain, Fog Computing, And Generative Intelligence for Secure Digital Twin Ecosystems in Cyber-Physical Systems , International Journal of Modern Computer Science and IT Innovations: Vol. 3 No. 02 (2026): Volume 03 Issue 02
- Mykola Nesvietaiev, Multisided Digital Platforms in the Sphere of Family Well-Being: Models for Balancing the Interests of Children, Parents, and Service Providers Under Regulatory Requirements for the Protection of Minors , International Journal of Modern Computer Science and IT Innovations: Vol. 2 No. 03 (2025): Volume 02 Issue 03
- Vivek Sharma, Survey of Secure Workload Scheduling and Management in Cloud Computing Systems , International Journal of Modern Computer Science and IT Innovations: Vol. 3 No. 07 (2026): Volume 03 Issue 07
You may also start an advanced similarity search for this article.