基于细粒度授权的物联网搜索数据隐私保护方案

王佳慧; 刘川意; 方滨兴

doi:10.11959/j.issn.2096-109x.2017.00127

您当前的位置：

首页 >

文章列表页 >

基于细粒度授权的物联网搜索数据隐私保护方案

学术论文 | 更新时间：2024-06-03

- 基于细粒度授权的物联网搜索数据隐私保护方案
- Data privacy preservation for the search of Internet of things based on fine-grained authorization
- 网络与信息安全学报 2017年3卷第1期页码：13-22
- 作者机构：
  
  1. 北京邮电大学计算机学院，北京 100876
  2. 哈尔滨工业大学深圳研究生院，广东深圳 518055
  3. 东莞电子科技大学电子信息工程研究院，广东东莞 523000
- 作者简介：
  
  [ "王佳慧（1983-），女，山西大同人，北京邮电大学博士生，主要研究方向为云计算与云安全、数据安全与数据保护。" ]
  [ "刘川意（1982-），男，四川乐山人，北京邮电大学副教授，主要研究方向为云计算、网络存储、可信计算。" ]
  [ "方滨兴（1960-），男，江西万年人，中国工程院院士，主要研究方向为信息与网络安全、内容安全。" ]
- 基金信息：
  
  国家高技术研究发展计划（“863”计划）基金资助项目;The National High Technology Research Program of China (863 Program)(2015AA016001);广东省产学研合作基金资助项目;Produc-tion-Study-Research Cooperation Project in Guangdong Province(2016B090921001);山东省自主创新及成果转化专项基金资助项目;Innovation Project in Shandong Province(2014ZZCX03411);国家自然科学基金资助项目;The National Natural Science Foundation of China(61370068)
- DOI：10.11959/j.issn.2096-109x.2017.00127
  中图分类号： TP309
- 网络首发：2017-01，
  
  纸质出版：2017-01-15
- 稿件说明：
移动端阅览
王佳慧, 刘川意, 方滨兴. 基于细粒度授权的物联网搜索数据隐私保护方案[J]. 网络与信息安全学报, 2017,3(1):13-22.

Jia-hui WANG, Chuan-yi LIU, Bin-xing FANG. Data privacy preservation for the search of Internet of things based on fine-grained authorization[J]. Journal of network and information security, 2017, 3(1): 13-22.
王佳慧, 刘川意, 方滨兴. 基于细粒度授权的物联网搜索数据隐私保护方案[J]. 网络与信息安全学报, 2017,3(1):13-22. DOI： 10.11959/j.issn.2096-109x.2017.00127.

Jia-hui WANG, Chuan-yi LIU, Bin-xing FANG. Data privacy preservation for the search of Internet of things based on fine-grained authorization[J]. Journal of network and information security, 2017, 3(1): 13-22. DOI： 10.11959/j.issn.2096-109x.2017.00127.

摘要

随着物联网和云计算技术的飞速发展和广泛应用，物联网搜索引擎应运而生。然而，物联网搜索引擎的开放性，使在互联网搜索领域就已经存在的数据隐私问题变得更加突出。首先，阐述了物联网搜索数据隐私保护的研究背景和安全挑战，并针对安全挑战，将密文搜索和基于属性的访问控制算法有机结合。然后，提出了基于细粒度授权的物联网搜索数据隐私保护方案，并对方案进行了安全分析和性能分析。最后，总结并指出了未来研究工作方向。

Abstract

With the rapid development of the Internet of things (IoT) technology and cloud computing technology

the search engine for Internet of things become a hot research topic. However

because of the openness of the search of IoT

the privacy in traditional Internet search area becomes more prominent and faces more challenges. Firstly

the research background and challenges of data privacy preservation for search of IoT were described. Secondly

the scheme of data privacy preservation for the search of Internet of things based on fine-grained authorization was pro-posed

which combined the encrypted search algorithm with the attribute based access control algorithm. Thirdly

the security analysis and performance analysis of the scheme were also carried out. Finally

the future research work was summarized and pointed out.

关键词

Keywords

references

ATZORI L , IERA A , MORABITO G , The Internet of things: a survey [J ] . Computer Networks , 2010 , 54 ( 15 ): 2787 - 2805 .

KANSAL A , NATH S , LIU J , et al . BSenseWeb: an infrastructure forshared sensing [J ] . IEEE Multimedia , 2007 , 14 ( 4 ): 8 - 13 .

OSTERMAIER B , ROMER K , MATTERN , et al . A real-time search engine for the Web of things [C ] // Internet of Things , Tokyo . 2010 .

BODENHEIM R , BUTTS J , DUNLAP S . Evaluation of the ability of the Shodan search engine to identify Internet-facing industrial control devices [J ] . International Journal of Critical InfrastructureProtection , 2014 , 7 ( 2 ): 114 - 123 .

SONG X D , WAGNER D , PERRIG A . Practical techniques for searches on encrypted data [C ] // The IEEE Symposium on Security and Privacy . 2000 .

GOH E . Secure indexes [R ] . IACR ePrint Cryptography Archive , 2003 .

CHANG Y , MITZENMACHER M . Privacy preserving keyword searches on remote encrypted data [C ] // The Applied Cryptography and Network Security . 2005 .

CURTMOLA R , GARAY J , KAMARA S , et al . Searchable sym-metric encryption: improved definitions and efficient construc-tions [C ] // The 13th ACM Conference on Computer and Communi-cations Security (CCS 2006) . 2006 .

LIESDONK P V , SEDGHI S , DOUMEN J , et al . Computationally efficient searchable symmetric encryption [C ] // Secure Data Man-agement, VLDB Workshop(SDM 2010) . 2010 : 87 - 100 .

KAMARA S , PAPAMANTHOU C , ROEDER T , et al . Dynamic searchable symmetric encryption [C ] // 2012 ACM Conference on Computer and Communications Security . 2012 : 965 - 976 .

CASH D , JAEGER J , JARECKI S , et al . Dynamic searchable encryption in very-large databases: data structures and implementa-tion [C ] // Network and Distributed SystemSecurity Symposium (NDSS'14) . 2014 .

BONEH D , CRESCENZO G D , OSTROVSKY R , Public key encryption with keyword search [C ] // Eurocryp'04 . 2004 .

ABDALLA M , BELLARE M , CATALANO D , Searchable encryp-tion revisited: consistency properties, relation to anonymous IBE, and extensions [C ] // Crypto'05 . 2005 .

BAEK J , SAFAVI-NAINI R , SUSILO W , Public key encryption with keyword search revisited [C ] // The International Conference on Computational Science and Applications (ICCSA 2008) . 2008 .

RHEE H S , PARK J H , SUSILO W , et al . Improved searchable public key encryption with designated tester [C ] // The ACM Sympo-sium on Information, Computer and Communications Secu-rity(ASIACCS 2009) . 2009 .

FANG L , SUSILO W , GE C , et al . A secure channel free public key encryption with keyword search scheme without random ora-cle [C ] // The International Conference on Cryptology and Network Security . 2009 .

KERSCHBAUM L , SORNIOTTI W . Searchable encryption for outsourced data analytics [C ] // The 7th European Conference on Public Key Infrastructures, Services and Applications(EuroPKI'10) . 2010 .

CAO N , WANG C , REN K . Privacy-preserving multi-keyword ranked search over encrypted cloud data [C ] // IEEE Infocom . 2011 .

SUN W , WANG B , CAO N . Privacy-preserving multi-keyword text search in the cloud supporting similarity-based ranking [C ] // ACM Symposium on Information, Computer and Communications Secu-rity . 2013 : 71 - 82 .

CHUAH M , HU W . Privacy-aware bedtree based solution for fuzzy multi-keyword search over encrypted data [C ] // The International Conference on Distributed Computing Systems Workshops . 2011 .

WANG B , YU S , LOU W . Privacy-preserving multi-keyword fuzzy search over encrypted data in the cloud [C ] // IEEE Infocom . 2014 .

MASHAURI D , LI R , HAN H . Adaptive multi-keyword ranked search over encrypted cloud data. [C ] // The International Conference on Collaborate Computing . 2015 .

SUN X , WANG X , XIA Z . Dynamic multi-keyword top-k ranked search over encrypted cloud data [J ] . The International Journal of Security and Its Applications . 2014 , 8 ( 1 ): 319 - 332 .

BONEH D , WATERS B . Conjunctive, subset, and range queries on encrypted data [C ] // TCC . 2007 .

SUN W , WANG B , CAO N . Verifiable privacy-preserving multi-keyword text search in the cloud supporting similarity-based ranking [J ] . IEEE Transactions on Parallel and Distributed Systems , 2014 , 25 ( 11 ): 3025 - 3035 .

LI J , WANG Q , WANG C . Fuzzy keyword search over encrypted data in cloud computing [C ] // IEEE Infocom . 2010 .

WANG C , CAO N , REN K . Enabling secure and efficient ranked keyword search over outsourced cloud data [J ] . IEEE Transactions on Parallel and Distributed Systems (TPDS) , 2011 , 23 ( 8 ): 1467 - 1749 .

SHI E , BETHENCOURT V , CHAN H . Multi-dimensional range query over encrypted data [C ] // IEEE Symposium on Security and Privacy , 2007 .

KAMARA S , PAPAMANTHOU C . Parallel and dynamic search-able symmetric encryption [M ] // Financial Cryptography and Data Security , Berlin: Springer , 2013 : 258 - 274 .

KAMARA S , PAPAMANTHOU C . Parallel and dynamic search-able symmetric encryption [M ] // CCS . 2012 .

STEFANOV E , PAPAMANTHOU C , SHI E . Practical dynamic searchable encryption with small leakage [C ] // NDSS . 2014 .

CASH D , JAEGER J , JARECKI S . et al . Dynamic searchable encryption in very large databases: data structures and implementa-tion [C ] // Network and Distributed System Security Symposium (NDSS) . 2014 .

DI CRESCENZO G , SARASWAT V . Public key encryption with searchable keywords based on Jacobi symbols [C ] // Indocrypt 2007 . 2007 .

LAI X , LU R , FOXTON K . An efficient searchable encryption scheme and its application in network forensics [C ] // E-Forensics . 2010 .

NAVEED M , PRABHAKARAN M , GUNTER C . Dynamic search-able encryption via blind storage [C ] // IEEE Symposium on Security and Privacy . 2014 .

SAHAI A , WATERS B . Fuzzy identity based encryption [C ] // Eurocrypt . 2005 .

GOYAL V , PANDEY O , SAHAI A , Attribute-based encryption for fine-grained access control of encrypted data [C ] // The 13th ACM Conference on Computer and Communications Security(CCS) . 2006 .

CHASE M . Multi-authority attribute based encryption [C ] // TCC . 2007 .

BOŽOVIC V , SOCEK D , STEINWANDT R , Multiauthority attrib-ute-based encryption with honest-but-curious central authority [J ] . International Journal of Computer Mathematics . 2012 , 89 ( 3 ): 268 - 283 .

CHASE M , CHOW S . Improving privacy and security in multi-authority attribute-based encryption [C ] // The 16th ACM Con-ference on Computer and Communications Security (CCS) . 2009 .

LEWKO A , WATERS B . Decentralizing attribute-based encryp-tion [C ] // Eurocrypt 2011 . 2011 .

LIU Z , CAO Z , HUANG Q . Fully secure multi-authority cipher-text-policy attribute-based encryption without random ora-cles [C ] // The European Symposium on Research in Computer Secu-rity (ESORICS) . 2011 .

HAN J , SUSILO W , MU Y . Privacy-preserving decentralizedkey-policy attribute-based encryption [J ] . IEEE Transactions on Parallel and Distributed Systems . 2012 , 23 ( 11 ): 2150 - 2162 .

YU S , WANG C , REN K . Achieving secure, scalable, and fine-graineddata access control in cloud computing [C ] // IEEE Info-com . 2010 .

YU S C , REN K , LOU W J . Defending against key abuse attacks in KP-ABE enabled broadcast systems [C ] // Security and Privacy in Communication Networks . 2009 .

WANG Y , CHEN K , LONG Y . Accountable authority key policy attribute-based encryption [J ] . Science China: Information Sciences , 2012 , 55 ( 7 ): 1631 - 1638 .

LI J , REN K , KIM K . A2BE: Accountable attribute-based encryp-tion for abuse free access control [R ] . Cryptology ePrintArchive . 2009 .

LI J , REN K , ZHU B . Privacy-aware attribute based encryption with user accountability [C ] // The 12th International Conference . 2009 .

LI J , HUANG Q , CHEN X . Multi-authority ciphertext-policy at-tribute-based encryption with accountability [C ] // The 6th Interna-tional Symposium on Information, Computer and Communications Security (ASIACCS) . 2011 .

SUN W , YU S , LOU V . Protecting your right: attribute-based key-word with fine-grained owner enforced search authorization in the cloud [C ] // IEEE Infocom . 2014 .

HAN F , QIN J , ZHAO H . A general transformation from KP-ABE to searchable encryption [J ] . Future Generation Computer Systems , 2014 , 30 : 107 - 115 .

BOUABANATEBIBEL T , KACI A . Parallel search over encrypted data under attribute based encryption on the cloud computing [J ] . Computers＆Security , 2015 .

KACI A , BOUABANA-TEBIBEL T . Access control reinforcement over searchable encryption [C ] // The 15th IEEE International Con-ference on Information Reuse And Integration . 2014 .

CASH D , JARECKI S , JUTLA C . Highly-scalable searchable symmetric encryption with support forboolean queries [C ] // Crypto , 2013 .

SADAKANE K . Fast algorithms for k-word proximity search [J ] . IEICE Transactions on Fundamentals of Electronics, Communica-tions and Computer Sciences , 2001 , 84 ( 9 ): 2311 - 2318 .

浏览量

258

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

智能电网中隐私保护的多维多函数数据聚合方案

激励驱动的联邦学习研究综述：隐私与安全

基于哈夫曼的k-匿名模型隐私保护数据压缩方案

基于差分隐私保护技术的多方求和查询方法

基于二维码和信息隐藏的物流系统隐私保护方案