Proxy-based encryption method, proxy-based decryption method, network equipment, network device and system

A proxy-based decryption method, comprising:

• obtaining encrypted ciphertexts that are re-encrypted and that are from at least two proxy servers;
• performing decryption preprocessing on the encrypted ciphertexts to generate preprocessed ciphertexts;
• and
• decrypting the preprocessed ciphertexts.

A network device, comprising:

• an obtaining module configured to obtain encrypted ciphertexts that are re-encrypted and from at least two proxy servers;
• a decryption preprocessing module configured to perform decryption preprocessing on the encrypted ciphertexts, and to generate preprocessed ciphertexts;
• and
• a decrypting module configured to decrypt the preprocessed ciphertexts.

A proxy-based network system comprising:

• at least one network equipment that includes:
• a proxy key generator module configured to generate according to a private key of the network equipment and a public key of a receiving end, and proxy keys that correspond to at least two proxy servers respectively, wherein a number of the proxy keys is equal to the number of the proxy servers;
• and
• a sender module configured to send encrypted ciphertexts and the proxy keys that correspond to the at least two proxy servers, respectively, to the at least two proxy servers, respectively, so that the at least two proxy servers re-encrypt the encrypted ciphertexts according to the corresponding proxy keys, respectively at least one network device that includes:
• an obtaining module configured to obtain encrypted ciphertexts that are re-encrypted and from at least two proxy servers;
• a decryption preprocessing module configured to perform decryption preprocessing on the encrypted ciphertexts, and to generate preprocessed ciphertexts;
• and
• a decrypting module configured to decrypt the preprocessed ciphertexts, and
• at least two proxy servers, wherein the at least two proxy servers are configured to re-encrypt encrypted ciphertexts according to corresponding proxy keys, respectively.