自适应多方可解密的勘探开发系统多维加密数据聚合方案OA
An adaptive multiparty decryptable multidimensional encrypted data aggregation scheme for exploration and development system
智慧油气勘探开发系统的出现,解决了传统油气系统中数据分析难度大、成本高等问题.然而,敏感油气生产数据在被实时采集以及传输的过程中,容易遭受恶意攻击者的窃听、拦截与修改,继而影响整个工业领域甚至国家能源安全.因此,为实现对敏感油气生产数据的隐私保护,提出一种自适应多方可解密的勘探开发系统多维加密数据聚合方案.方案改进双陷门同态加密算法,以实现对数据的机密性保护,设计超递增序列实现对多维度敏感油气生产数据的编码处理,并利用秘密共享技术实现智慧油气终端到数据聚合云服务器的传输容错功能.方案中的数据聚合云服务器可以实现对多维度加密数据的聚合,并实现对可验证加密数据以及聚合密文的存储,以此减轻智慧油气终端设备与控制中心的存储压力.在有数据请求时,智慧油气终端设备与控制中心可分别使用不同的密钥解密对应的密文,实现自适应多方可解密功能.方案中的数据完整性验证使用基于哈希函数的消息认证码实现,达到轻量级的效果,且传输数据的通信实体皆使用匿名身份进行传输,在保证数据机密性的同时实现对身份信息的隐私保护.安全性与性能分析表明,所提方案能在保证敏感油气生产数据机密性与完整性的同时高效部署于智慧油气勘探开发系统.
The emergence of intelligent oil and gas exploration and development system solves the problems of difficult data analysis and high costs in traditional oil and gas system.However,in the process of real-time collection and transmission,sensitive oil and gas production data are vulnerable to eavesdropping,interception and modification by malicious attackers,which affects the entire industrial field and even the national energy security.Therefore,in order to realize the privacy protection of sensi-tive oil and gas production data,this paper proposes an adaptive multiparty decryptable multidimensional en-crypted data aggregation scheme for exploration and development systems.The scheme modifies double trapdoor homomorphic encryption algorithm to realize data confidentiality,designs the superincreasing sequence to realize the encoding of multidimensional sensitive oil and gas production data,and uses se-cret sharing technique to realize the fault-tolerant transmission function from the smart oil and gas ter-minal to the data aggregation cloud server.The data aggregation cloud server in the scheme can realize the aggregation of encrypted data,and realize the storage of verifiable encrypted data and aggregated ciphertext,so as to reduce the storage pressure of smart oil and gas terminal equipment and control cen-ter.Upon a data request,the smart oil and gas terminal equipment and the control center can use differ-ent keys to decrypt the corresponding ciphertext,and realize the adaptive multiparty decryption func-tion.In the scheme,the data integrity verification is implemented by using hash-based message authen-tication code(HMAC),ensuring lightweight operation.The communication entities that transmit data use anonymous identities for transmission,ensuring data confidentiality while protecting identity priva-cy.The security and performance analysis show that the scheme can ensure the confidentiality and integ-rity of sensitive oil and gas production data,and can be efficiently deployed in smart oil and gas explora-tion and development systems.
张晓均;张楠;李磊;张豪;薛婧婷
中国石油集团东方地球物理勘探有限责任公司,河北 涿州 072751||油气勘探计算机软件国家工程研究中心,河北 涿州 072751||西南石油大学计算机与软件学院,四川 成都 610500中国石油集团东方地球物理勘探有限责任公司,河北 涿州 072751||油气勘探计算机软件国家工程研究中心,河北 涿州 072751||西南石油大学计算机与软件学院,四川 成都 610500中国石油集团东方地球物理勘探有限责任公司,河北 涿州 072751||油气勘探计算机软件国家工程研究中心,河北 涿州 072751西南石油大学计算机与软件学院,四川 成都 610500西南石油大学计算机与软件学院,四川 成都 610500
信息技术与安全科学
勘探开发系统多维加密数据聚合双陷门同态加密自适应多方可解密
exploration and development systemmultidimensional encrypted data aggregationdouble trapdoor homomorphic encryptionadaptive multiparty decryption
《计算机工程与科学》 2026 (8)
1398-1409,12
国家自然科学基金(61902327)四川省自然科学基金(2025ZNSFSC0495)油气勘探开发软件国家工程研究中心开放课题(DFWT-ZYRJ-2024-JS-81)
评论