云环境下基于属性策略隐藏的可搜索加密方案

周艺华; 扈新宇; 李美奇; 杨宇光

doi:10.11959/j.issn.2096-109x.2022019

您当前的位置：

首页 >

文章列表页 >

云环境下基于属性策略隐藏的可搜索加密方案

学术论文 | 更新时间：2024-06-03

- 云环境下基于属性策略隐藏的可搜索加密方案
- Searchable encryption scheme based on attribute policy hiding in a cloud environment
- 网络与信息安全学报 2022年8卷第2期页码：112-121
- 作者机构：
  
  1. 北京工业大学信息学部北京 100124
  2. 可信计算北京市重点实验室北京 100124
- 作者简介：
  
  [ "周艺华（1969− ），男，山东济南人，北京工业大学副教授，主要研究方向为网络与信息安全" ]
  [ "扈新宇（1998− ），女，河北邢台人，北京工业大学硕士生，主要研究方向为信息安全、隐私保护" ]
  [ "李美奇（1998− ），女，山西运城人，北京工业大学硕士生，主要研究方向为信息安全、隐私保护" ]
  [ "杨宇光（1976− ），女，北京工业大学教授、博士生导师，主要研究方向为信息安全" ]
- 基金信息：
  
  国家自然科学基金;The National Natural Science Foundation of China(62071015)
- DOI：10.11959/j.issn.2096-109x.2022019
  中图分类号： TP309
- 网络首发：2022-04，
  
  纸质出版：2022-04-15
- 稿件说明：
移动端阅览
周艺华, 扈新宇, 李美奇, 等. 云环境下基于属性策略隐藏的可搜索加密方案[J]. 网络与信息安全学报, 2022,8(2):112-121.

Yihua ZHOU, Xinyu HU, Meiqi LI, et al. Searchable encryption scheme based on attribute policy hiding in a cloud environment[J]. Chinese Journal of Network and Information Security, 2022, 8(2): 112-121.
周艺华, 扈新宇, 李美奇, 等. 云环境下基于属性策略隐藏的可搜索加密方案[J]. 网络与信息安全学报, 2022,8(2):112-121. DOI： 10.11959/j.issn.2096-109x.2022019.

Yihua ZHOU, Xinyu HU, Meiqi LI, et al. Searchable encryption scheme based on attribute policy hiding in a cloud environment[J]. Chinese Journal of Network and Information Security, 2022, 8(2): 112-121. DOI： 10.11959/j.issn.2096-109x.2022019.

摘要

基于属性的可搜索加密技术可以实现对数据的细粒度访问控制，但现有的可搜索加密方案，关键字的搜索、访问控制、文件加密基本上是分别执行的，导致攻击者可能跳过访问策略直接进行关键字索引匹配或文件解密；其次，现有方案中数据拥有者需将加密文件的密钥以安全通道传给用户，增加了数据拥有者的开销；此外，大多基于树型的访问控制策略是公开的，容易造成隐私泄露。因此，基于线性秘密分享（LSSS，linear secret sharing schemes）访问结构，提出了一种云环境下基于属性策略隐藏的可搜索加密方案。通过将策略秘密值嵌入关键字加密与文件存储加密，实现访问控制、关键字搜索与文件加密的有机结合；通过聚合密钥技术实现用户无须与数据拥有者交互，即可对文件进行解密的功能，减轻了密钥管理的负担，存储空间提高约30%。实验结果及安全性分析表明，所提方案具有数据存储的安全性、访问策略的隐私性、陷门的不可连接性等功能，具有较高的密文检索效率，与已有主流方案相比，检索效率提高至20%以上。

Abstract

Attribute-based searchable encryption technology can achieve fine-grained access control of data

but the existing searchable encryption scheme

keyword search

access control and file encryption are basically performed separately

causing the attacker to directly skip the access policy for keyword index matching and file decryption.Besides

the data owners in the existing schemes need to pass the key of the encrypted file to the user in a secure channel

which increases the cost of the data owner.Furthermore

most tree-based access control policies are open and easy to cause privacy leakage.Therefore

based on the LSSS (linear secret sharing schemes) access architecture

the searchable encryption scheme based on attribute policy hiding in a cloud environment was proposed.Through the embedding of policy secret values into keyword encryption and file storage encryption

the combination of access control

keyword search and file encryption were realized.The aggregate key technology enables users to decrypt files without interacting with the data owner

reducing the burden of key management and increasing storage space by approximately 30%.The experimental results and security analysis show that the proposed scheme guarantees the security of stored data

privacy of access strategy and non-connectivity of trap gate.Compared with the existing mainstream scheme

the retrieval efficiency of the proposed scheme has improved to more than 20%.

关键词

Keywords

references

SONG D , WAGNER D , PERRIG A . Practical techniques for searches on encrypted data [C ] // Proceeding 2000 IEEE Symposium on Security and Privacy . 2000 : 44 - 55 .

LIU Z Y , XU C G , YAO Z G . Forward secure searchable encryption with conjunctive-keyword supporting multi-user [C ] // 3rd International Conference on Security and Privacy in New Computing Environments . 2021 : 423 - 440 .

GE X R , YU J , HU C , et al . Enabling efficient verifiable fuzzy keyword search over encrypted data in cloud computing [J ] . IEEE Access , 2018 ( 6 ): 45725 - 45739 .

LIN W Y , CUI H L , LI B C , et al . Privacy-preserving similarity search with efficient updates in distributed key-value stores [J ] . IEEE Transactions on Parallel and Distributed Systems , 2021 , 32 ( 5 ): 1072 - 1084 .

AHMED MA , RAMACHANDRAM S , KHAN KUR . Conjunctive keyword forward secure ranked dynamic searchable encryption over outsourced encrypted data [C ] // 8th International Symposium on Security in Computing and Communications (SSCC 2020) . 2020 : 197 - 212 .

ZHANG Y , LI Y , WANG Y F . Efficient searchable symmetric encryption supporting dynamic multikeyword ranked search [J ] . Security and Communication Networks , 2020 .

高诗尧 , 陈燕俐 , 许玉岚 . 云环境下基于属性的多关键字可搜索加密方案 [J ] . 计算机科学 , 2021 , 9 ( 6 ): 1 - 15 .

GAO S Y , CHEN Y L , XU Y L . Property-based multi-keyword searchable encryption schemes in a cloud environment [J ] . Computer Science , 2021 , 9 ( 6 ): 1 - 15 .

LIU X Y , LU T T , HE X M , et al . Verifiable attribute-based keyword search over encrypted cloud data supporting data deduplication [J ] . IEEE Access , 2020 ( 8 ): 52062 - 52074 .

张玉磊 , 刘文静 , 刘祥震 , 等 . 基于授权的多服务器可搜索密文策略属性基加密方案 [J ] . 电子与信息学报 , 2019 , 41 ( 8 ): 1808 - 1814 .

ZHANG Y L , LIU W J , LIU X Z , et al . Authorization-based mul-ti-server can search for a cipheric policy attribute-based encryption scheme [J ] . Journal of Electronics and Informatics , 2019 , 41 ( 8 ): 1808 - 1814 .

SONG X Y , ZHOU Z , DUAN W J , et al . Attribute-based searchable encryption scheme with fuzzy keywords [J ] // Computer Science , 2021 : 44 - 61 .

牛淑芬 , 谢亚亚 , 杨平平 , 等 . 区块链上基于云辅助的属性基可搜索加密方案 [J ] . 计算机研究与发展 , 2021 , 58 ( 4 ): 811 - 821 .

NIU S F , XIE Y Y , YANG P P , et al . Cloud-based attribute bases on the blockchain are searchable for encryption schemes [J ] . Computer Research and Development , 2021 , 58 ( 4 ): 811 - 821 .

MIAO Y B , MA J F , LIU X M , et al . Attribute-based keyword search over hierarchical data in cloud computing [J ] . IEEE Transactions on Services Computing , 2020 , 13 ( 6 ): 985 - 998 .

WU A , ZHENG D , ZHANG Y , et al . Hidden policy attribute-based data sharing with direct revocation and keyword search in cloud computing [J ] . Sensors , 2018 , 18 ( 7 ).

YAN X X , NI H , LIU Y , et al . Privacy-preserving multi-authority attribute-based encryption with dynamic policy updating in PHR [J ] . Computer Science and Information Systems , 2019 , 13 ( 6 ): 831 - 847 .

WATERS B . Ciphertext-policy attribute-based encryption:an expressive,efficient,and provably secure realization [J ] . Lecture Notes in Computer Science , 2011 ,( 6571 ): 53 - 70 .

BONEH D , FRANKLIN M . Identity-based encryption from the weil pairing [J ] . Lecture Notes in Computer Science , 2001 ,( 2139 ): 213 - 229 .

ZHANG W , ZHANG Z S , XIONG H , et al . PHAS-HEKR-CP-ABE:partially policy-hidden CP-ABE with highly efficient key revocation in cloud data sharing system [J ] . Journal of Ambient Intelligence and Humanized Computing , 2021 ( 4 ): 1 - 15 .

MA M M , LUO M , FAN S Q , et al . An efficient pairing-free certicateless searchable public key encryption for cloud-based IIoT [J ] . Wireless Communications and Mobile Computing , 2020 : 1 - 11 .

GOYAL V , PANDEY O , SAHAI A , et al . Attribute-based encryption for fine grained access control of encrypted data [C ] // Proceedings of the 13th ACM Conference on Computer and Communication Security , 2006 : 89 - 98 .

浏览量

654

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于PIR增强的可搜索加密方案研究

基于区块链的个人健康护照存储、共享与验证方案

多关键词动态可搜索加密方案

基于访问控制安全高效的多用户外包图像检索方案

具有密文等值测试功能的公钥加密技术综述