区块链环境下基于秘密共享的数字权限管理方案

针对数字权限保护中对内容加密密钥的安全保存和有效分发的需求，提出了一个区块链环境下基于秘密共享的数字权限保护方案。该方案主要包括系统初始化、内容加密、许可授权和内容解密4个协议。在该方案中，利用Pedersen可验证秘密共享方案和属性基加密（ABE）算法来实现内容加密密钥的保护和分发，将内容提供商从管理内容加密密钥的任务中解放出来，从而确保了密钥管理的安全性和灵活性。此外，基于区块链的数字权限保护方案具有信息公开透明、不可篡改等特点。安全性分析表明，该方案在区块链环境下是安全可行的；仿真实验结果表明，该方案能够以较低的开销实现数字内容的权限保护。

Digital rights management scheme based on secret sharing in blockchain environment

In order to meet the requirements of safe storage and effective distribution of content encryption key in digital rights protection， a new digital rights protection scheme based on secret sharing in blockchain environment was proposed， including 4 protocols： system initialization， content encryption， license authorization and content decryption. The Pedersen’s verifiable secret sharing scheme and Attribute-Based Encryption （ABE） algorithm were used to protect and distribute the content encryption key. The content providers were freed from the task of managing content encryption keys， which ensured the security and flexibility of key management. In addition， the digital rights protection scheme based on blockchain has the characteristics of information openness and transparency， and is tamper-resistant. Security analysis show that the proposed scheme is safe and feasible in the blockchain environment； simulation results show that the proposed scheme can achieve the rights protection of digital content with low cost.