Searchable encryption scheme based on attribute policy hiding in a cloud environment

Yihua ZHOU; Xinyu HU; Meiqi LI; Yuguang YANG

doi:10.11959/j.issn.2096-109x.2022019

您当前的位置：

首页 >

文章列表页 >

Searchable encryption scheme based on attribute policy hiding in a cloud environment

Papers | 更新时间：2024-06-03

- Searchable encryption scheme based on attribute policy hiding in a cloud environment
- Chinese Journal of Network and Information Security Vol. 8, Issue 2, Pages: 112-121(2022)
- 作者机构：
  
  1. 北京工业大学信息学部北京 100124
  2. 可信计算北京市重点实验室北京 100124
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2022019
  CLC： TP309
- Online First：2022-04，
  
  Published：15 April 2022
- 稿件说明：
移动端阅览
Yihua ZHOU, Xinyu HU, Meiqi LI, et al. Searchable encryption scheme based on attribute policy hiding in a cloud environment[J]. Chinese Journal of Network and Information Security, 2022, 8(2): 112-121.
DOI：

Yihua ZHOU, Xinyu HU, Meiqi LI, et al. Searchable encryption scheme based on attribute policy hiding in a cloud environment[J]. Chinese Journal of Network and Information Security, 2022, 8(2): 112-121. DOI： 10.11959/j.issn.2096-109x.2022019.

摘要

基于属性的可搜索加密技术可以实现对数据的细粒度访问控制，但现有的可搜索加密方案，关键字的搜索、访问控制、文件加密基本上是分别执行的，导致攻击者可能跳过访问策略直接进行关键字索引匹配或文件解密；其次，现有方案中数据拥有者需将加密文件的密钥以安全通道传给用户，增加了数据拥有者的开销；此外，大多基于树型的访问控制策略是公开的，容易造成隐私泄露。因此，基于线性秘密分享（LSSS，linear secret sharing schemes）访问结构，提出了一种云环境下基于属性策略隐藏的可搜索加密方案。通过将策略秘密值嵌入关键字加密与文件存储加密，实现访问控制、关键字搜索与文件加密的有机结合；通过聚合密钥技术实现用户无须与数据拥有者交互，即可对文件进行解密的功能，减轻了密钥管理的负担，存储空间提高约30%。实验结果及安全性分析表明，所提方案具有数据存储的安全性、访问策略的隐私性、陷门的不可连接性等功能，具有较高的密文检索效率，与已有主流方案相比，检索效率提高至20%以上。

Abstract

Attribute-based searchable encryption technology can achieve fine-grained access control of data

but the existing searchable encryption scheme

keyword search

access control and file encryption are basically performed separately

causing the attacker to directly skip the access policy for keyword index matching and file decryption.Besides

the data owners in the existing schemes need to pass the key of the encrypted file to the user in a secure channel

which increases the cost of the data owner.Furthermore

most tree-based access control policies are open and easy to cause privacy leakage.Therefore

based on the LSSS (linear secret sharing schemes) access architecture

the searchable encryption scheme based on attribute policy hiding in a cloud environment was proposed.Through the embedding of policy secret values into keyword encryption and file storage encryption

the combination of access control

keyword search and file encryption were realized.The aggregate key technology enables users to decrypt files without interacting with the data owner

reducing the burden of key management and increasing storage space by approximately 30%.The experimental results and security analysis show that the proposed scheme guarantees the security of stored data

privacy of access strategy and non-connectivity of trap gate.Compared with the existing mainstream scheme

the retrieval efficiency of the proposed scheme has improved to more than 20%.

关键词

Keywords

references

SONG D , WAGNER D , PERRIG A . Practical techniques for searches on encrypted data [C ] // Proceeding 2000 IEEE Symposium on Security and Privacy . 2000 : 44 - 55 .

LIU Z Y , XU C G , YAO Z G . Forward secure searchable encryption with conjunctive-keyword supporting multi-user [C ] // 3rd International Conference on Security and Privacy in New Computing Environments . 2021 : 423 - 440 .

GE X R , YU J , HU C , et al . Enabling efficient verifiable fuzzy keyword search over encrypted data in cloud computing [J ] . IEEE Access , 2018 ( 6 ): 45725 - 45739 .

LIN W Y , CUI H L , LI B C , et al . Privacy-preserving similarity search with efficient updates in distributed key-value stores [J ] . IEEE Transactions on Parallel and Distributed Systems , 2021 , 32 ( 5 ): 1072 - 1084 .

AHMED MA , RAMACHANDRAM S , KHAN KUR . Conjunctive keyword forward secure ranked dynamic searchable encryption over outsourced encrypted data [C ] // 8th International Symposium on Security in Computing and Communications (SSCC 2020) . 2020 : 197 - 212 .

ZHANG Y , LI Y , WANG Y F . Efficient searchable symmetric encryption supporting dynamic multikeyword ranked search [J ] . Security and Communication Networks , 2020 .

高诗尧 , 陈燕俐 , 许玉岚 . 云环境下基于属性的多关键字可搜索加密方案 [J ] . 计算机科学 , 2021 , 9 ( 6 ): 1 - 15 .

GAO S Y , CHEN Y L , XU Y L . Property-based multi-keyword searchable encryption schemes in a cloud environment [J ] . Computer Science , 2021 , 9 ( 6 ): 1 - 15 .

LIU X Y , LU T T , HE X M , et al . Verifiable attribute-based keyword search over encrypted cloud data supporting data deduplication [J ] . IEEE Access , 2020 ( 8 ): 52062 - 52074 .

张玉磊 , 刘文静 , 刘祥震 , 等 . 基于授权的多服务器可搜索密文策略属性基加密方案 [J ] . 电子与信息学报 , 2019 , 41 ( 8 ): 1808 - 1814 .

ZHANG Y L , LIU W J , LIU X Z , et al . Authorization-based mul-ti-server can search for a cipheric policy attribute-based encryption scheme [J ] . Journal of Electronics and Informatics , 2019 , 41 ( 8 ): 1808 - 1814 .

SONG X Y , ZHOU Z , DUAN W J , et al . Attribute-based searchable encryption scheme with fuzzy keywords [J ] // Computer Science , 2021 : 44 - 61 .

牛淑芬 , 谢亚亚 , 杨平平 , 等 . 区块链上基于云辅助的属性基可搜索加密方案 [J ] . 计算机研究与发展 , 2021 , 58 ( 4 ): 811 - 821 .

NIU S F , XIE Y Y , YANG P P , et al . Cloud-based attribute bases on the blockchain are searchable for encryption schemes [J ] . Computer Research and Development , 2021 , 58 ( 4 ): 811 - 821 .

MIAO Y B , MA J F , LIU X M , et al . Attribute-based keyword search over hierarchical data in cloud computing [J ] . IEEE Transactions on Services Computing , 2020 , 13 ( 6 ): 985 - 998 .

WU A , ZHENG D , ZHANG Y , et al . Hidden policy attribute-based data sharing with direct revocation and keyword search in cloud computing [J ] . Sensors , 2018 , 18 ( 7 ).

YAN X X , NI H , LIU Y , et al . Privacy-preserving multi-authority attribute-based encryption with dynamic policy updating in PHR [J ] . Computer Science and Information Systems , 2019 , 13 ( 6 ): 831 - 847 .

WATERS B . Ciphertext-policy attribute-based encryption:an expressive,efficient,and provably secure realization [J ] . Lecture Notes in Computer Science , 2011 ,( 6571 ): 53 - 70 .

BONEH D , FRANKLIN M . Identity-based encryption from the weil pairing [J ] . Lecture Notes in Computer Science , 2001 ,( 2139 ): 213 - 229 .

ZHANG W , ZHANG Z S , XIONG H , et al . PHAS-HEKR-CP-ABE:partially policy-hidden CP-ABE with highly efficient key revocation in cloud data sharing system [J ] . Journal of Ambient Intelligence and Humanized Computing , 2021 ( 4 ): 1 - 15 .

MA M M , LUO M , FAN S Q , et al . An efficient pairing-free certicateless searchable public key encryption for cloud-based IIoT [J ] . Wireless Communications and Mobile Computing , 2020 : 1 - 11 .

GOYAL V , PANDEY O , SAHAI A , et al . Attribute-based encryption for fine grained access control of encrypted data [C ] // Proceedings of the 13th ACM Conference on Computer and Communication Security , 2006 : 89 - 98 .

Views

654

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Research on searchable encryption scheme based on enhanced PIR

Individual health passport storage, sharing and verification scheme based on blockchain

Dynamic multi-keyword searchable encryption scheme

Efficient and secure multi-user outsourced image retrieval scheme with access control

Survey on public key encryption with equality test

Related Author

MA Limin

TANG Liang

HUANG Haiping

GAO Chenhao

JI Haoyu

GAO Hancheng

Shuang REN

Yong LI

Related Institution

Beijing Academy of Educational Science

College of Computer Science，Beijing Information Science and Technology University

School of Computer Science, Nanjing University of Posts and Telecommunications

Jiangsu High Technology Research Key Laboratory for Wireless Sensor Networks

School of Electronic and Information Engineering, Beijing Jiaotong University

⁰