Private set intersection (PSI) is a fundamental cryptographic protocol which has a wide range of applications. It enables two clients to compute the intersection of their private datasets without revealing non-matching elements. The advent of cloud computing drives the ambition to reduce computation and data management overhead by outsourcing such computations. However, since the cloud is not trustworthy, some cryptographic methods should be applied to maintain the confidentiality of datasets. But, in doing so, data owners may be excluded from access control on their outsourced datasets. Therefore, to control access rights and to interact with authorized users, they have to be online during the protocol. On the other hand, none of the existing cloud-based PSI schemes support fine-grained access control over outsourced datasets. This paper, for the first time, proposes an attribute-based private set intersection (AB-PSI) scheme providing fine-grained access control. AB-PSI allows a data owner to control intersection computations on its outsourced dataset by defining an access control policy. We also provide security definitions for an AB-PSI scheme and prove the security of our scheme in the standard model. We implement our scheme and report performance evaluation results.

专用集交叉点（PSI）是一种基本的密码协议，具有广泛的应用范围。它使两个客户端能够计算其私有数据集的交集，而无需揭示不匹配的元素。云计算的出现推动了通过外包此类计算来减少计算和数据管理开销的雄心。但是，由于云是不可信的，因此应采用某些加密方法来维护数据集的机密性。但是，这样做时，数据所有者可能被排除在对其外包数据集的访问控制之外。因此，为了控制访问权限并与授权用户进行交互，在协议期间，它们必须处于联机状态。另一方面，现有的基于云的PSI方案均不支持对外包数据集的细粒度访问控制。这张纸，首次提出了一种基于属性的私有集相交（AB-PSI）方案，该方案可提供细粒度的访问控制。AB-PSI允许数据所有者通过定义访问控制策略来控制其外包数据集上的交集计算。我们还提供了AB-PSI方案的安全性定义，并在标准模型中证明了我们方案的安全性。我们执行我们的计划并报告绩效评估结果。