支持联合查询和交叉模式隐藏的结构加密

杨紫依; 马昌社; 谢南江

doi:10.11959/j.issn.2096-109x.2024048

您当前的位置：

首页 >

文章列表页 >

支持联合查询和交叉模式隐藏的结构加密

学术论文 | 更新时间：2024-08-14

- 支持联合查询和交叉模式隐藏的结构加密
- Cross pattern hiding structured encryption for conjunctive queries
- 网络与信息安全学报 2024年10卷第3期页码：175-187
- 作者机构：
  
  华南师范大学计算机学院，广东广州 510631
- 作者简介：
  
  [ "杨紫依（1998- ），女，湖南岳阳人，华南师范大学硕士生，主要研究方向为可搜索加密。" ]
  [ "马昌社（1974- ），男，湖南邵阳人，华南师范大学教授，主要研究方向为加密数据隐私计算、应用密码技术。" ]
  [ "谢南江（1998- ），男，广东梅州人，华南师范大学硕士生，主要研究方向为密码学应用。" ]
- 基金信息：
  
  国家自然科学基金项目(62072192;U2336209)
- DOI：10.11959/j.issn.2096-109x.2024048
  中图分类号： TP309
- 收稿：2023-11-27，
  
  修回：2024-04-10，
  
  纸质出版：2024-06-25
- 稿件说明：
移动端阅览
杨紫依, 马昌社, 谢南江. 支持联合查询和交叉模式隐藏的结构加密[J]. 网络与信息安全学报, 2024, 10(3): 175-187.

YANG Z Y, MA C S, XIE N J. Cross pattern hiding structured encryption for conjunctive queries[J]. Chinese Journal of Network and Information Security, 2024, 10(3): 175-187.
杨紫依, 马昌社, 谢南江. 支持联合查询和交叉模式隐藏的结构加密[J]. 网络与信息安全学报, 2024, 10(3): 175-187. DOI： 10.11959/j.issn.2096-109x.2024048.

YANG Z Y, MA C S, XIE N J. Cross pattern hiding structured encryption for conjunctive queries[J]. Chinese Journal of Network and Information Security, 2024, 10(3): 175-187. DOI： 10.11959/j.issn.2096-109x.2024048.

摘要

结构加密属于可搜索加密中在性能、安全性和查询表达能力之间权衡得较好的方案，不仅保护了云存储数据的隐私，且支持对密文数据库进行多种类型的查询。2013年提出的不经意交叉索引（oblivious cross-tag，OXT）方案支持多关键字联合查询，但令牌的计算与通信开销均为线性复杂度，近年来提出的联合过滤（ConjFilter）方案降低了令牌开销，减少了支持布尔查询的结构加密方案的隐私泄露，但导致不同查询之间的交叉泄露。为了防止出现联合查询泄露问题，提出了基于随机置换和计数器加密模式的转换密钥加密（transformable key encryption，TKE）方案，该方案可以在服务端不解密密文的条件下，把一个密钥加密的密文转换为另一个密钥加密的密文，且不泄露除转换模式之外的其他任何信息。基于该方案设计了支持联合查询的加密多映射方案可转换密钥过滤器（transformable key filter，TK-Filter），其与ConjFilter方案具有几乎相同的通信开销和存储开销，且能有效防止不同查询之间的交叉泄露。实验分析结果表明，TK-Filter在各种规模的数据集上相较ConjFilter减少了58%到86%的初始化时间，提高了34%到41%的搜索效率。

Abstract

Structured encryption

a specialized form of searchable encryption

has been recognized for offering improved tradeoffs between performance

security

and expressiveness. It is designed to protect the privacy of cloud storage data and supports a variety of queries on the ciphertext database. The structured encryption scheme OXT

proposed in 2013

supports conjunctive queries of multi-keywords but was found to incur linear complexity in both token computation and search communication overheads. The ConjFilter scheme

more recently introduced

was aimed at decreasing the token overhead and reducing privacy leakage for structured encryption schemes that support Boolean queries. However

it was observed that this scheme resulted in cross-leakage between different queries. To address this issue

a transformed key encryption (TKE) scheme

based on random permutation and counter encryption modes was proposed. In essence

the TKE scheme was capable of converting ciphertext encrypted by one key into ciphertext encrypted by another key

without the need for decrypting the ciphertext at the serving side and without disclosing any information beyond the transformation modes. Utilizing this scheme

an encrypted multi-map scheme

transformable key filter (TK-Filter)

was designed to support conjunctive queries. This scheme was reported to have nearly identical communication and storage overhead as the ConjFilter scheme but effectively prevented cross-leakage between different queries. Experimental analysis results show that TK-Filter reduces the initialization time by 58% to 86% and improves the search efficiency by 34% to 41% compared to ConjFilter across datasets of various sizes.

关键词

Keywords

references

GENTRY C . Fully homomorphic encryption using ideal lattices [C ] // Proceedings of the Forty-First Annual ACM Symposium on Theory of Computing . New York : ACM , 2009 : 169 - 178 .

BONEH D , SAHAI A , WATERS B . Functional encryption: definitions and challenges [M ] . ISHAI Y, ed. Theory of Cryptography. Berlin, Heidelberg : Springer Berlin Heidelberg , 2011 : 253 - 273 .

GOLDREICH O . Towards a theory of software protection and simulation by oblivious RAMs [C ] // Proceedings of the 19th Annual ACM Symposium on Theory of Com-uting ' STOC '87 . New York : ACM , 1987 : 182 - 194 .

BELLARE M , BOLDYREVA A , O'NEILL A . Deterministic and efficiently searchable encryption [C ] // Advances in Cryptology-CRYPTO 2007: 27th Annual International Cryptology Conference , Berlin, Heidelberg : Springer Berlin Heidelberg , 2007 : 535 - 552 .

BOLDYREVA A , CHENETTE N , O'NEILL A . Order-preserving encryption revisited: improved security analysis and alternative solutions [J ] . IACR Cryptol EPrint Arch , 2011 , 2012 : 625 .

CHASE M , KAMARA S . Structured encryption and controlled disclosure [C ] // Proceedings of Advances in Cryptology-ASIACRYPT 2010: 16th International Conference on the Theory and Application of Cryptology and Information Security , Berlin, Heidelberg : Springer Berlin Heidelberg , 2010 : 577 - 594 .

LI T C , WU J J , WANG J F . Efficient volume-hiding encrypted multi-maps with support for conjunctive queries [M ] // ICT Systems Security and Privacy Protection . Cham : Springer International Publishing , 2022 : 467 - 485 .

GUO S X , GENG H Z , SU L , et al . A rankable Boolean searchable encryption scheme supporting dynamic updates in a cloud environment [J ] . IEEE Access , 2023 , 11 : 63475 - 63486 .

PATEL S , PERSIANO G , SEO J Y , et al . Efficient Boolean search over encrypted data with reduced leakage [C ] // Proceedings of Advances in Cryptology-ASIACRYPT 2021: 27th International Conference on the Theory and Application of Cryptology and Information Security , Cham : Springer International Publishing , 2021 : 577 - 607 .

SONG D X , WAGNER D , PERRIG A . Practical techniques for searches on encrypted data [C ] // Proceeding of 2000 IEEE Symposium on Security and Privacy . Piscataway : IEEE Press , 2000 : 44 - 55 .

JUTLA C , PATRANABIS S . Efficient searchable symmetric encryption for join queries [C ] // Proceedings of International Conference on the Theory and Application of Cryptology and Information Security . Cham : Springer Nature Switzerland , 2022 : 304 - 333 .

MA C S , GU Y P , LI H F . Practical searchable symmetric encryption supporting conjunctive queries without keyword pair result pattern leakage [J ] . IEEE Access , 2020 , 8 : 107510 - 107526 .

BOST R . ∑oφoς: forward secure searchable encryption [C ] // Proceedings of the Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security . New York : ACM , 2016 : 1143 – 1154 .

ZHENG J B , ZHANG J Y , ZHANG X M , et al . Symmetric searchable encryption scheme that supports phrase search [J ] . Microsystem Technologies , 2021 , 27 ( 4 ): 1721 - 1727 .

GOLLE P , STADDON J , WATERS B . Secure conjunctive keyword search over encrypted data [M ] . JAKOBSSON M, YUNG M, ZHOU J Y, eds. Applied Cryptography and Network Security. Berlin, Heidelberg : Springer Berlin Heidelberg , 2004 : 31 - 45 .

BALLARD L , KAMARA S , MONROSE F . Achieving efficient conjunctive keyword searches over encrypted data [M ] .QINGSH, MAOWB, LÓPEZJ, alet, eds. Information and Communications Security . Berlin, Heidelberg : Springer Berlin Heidelberg , 2005 : 414 - 426 .

CASH D , JARECKI S , JUTLA C , et al . Highly-scalable searchable symmetric encryption with suppo iffie boolean queries [C ] // Proceedings of Advances in Cryptology-CRYPTO 2013: 33rd Annual Cryptology Conference , Berlin, Heidelberg : Springer Berlin Heidelberg , 2013 : 353 - 373 .

KAMARA S , MOATAZ T . Boolean searchable symmetric encryption with worst-case sub-linear complexity [C ] // Proceedings of Advances in Cryptology-EUROCRYPT 2017: 36th Annual International Conference on the Theory and Applications of Cryptographic Techniques , Cham : Springer International Publishing , 2017 : 94 - 124 .

BELLARE M , DESAI A , JOKIPII E , et al . A concrete security treatment of symmetric encryption [C ] // Proceedings of 38th Annual Symposium on Foundations of Computer Science . Piscataway : IEEE Press , 2002 : 394 - 403 .

JARECKI S , JUTLA C , KRAWCZYK H , et al . Outsourced symmetric private information retrieval [C ] // Proceedings of the 2013 ACM SIGSAC Conference on Computer & Communications Security . 2013 : 875 - 888 .

BELLARE M , CANETTI R , KRAWCZYK H . Pseudorandom functions revisited: the cascade construction and its concrete security [C ] // Proceedings of 37th Conference on Foundations of Computer Science . Piscataway : IEEE Press , 1996 : 514 - 523 .

KAMARA S , MOATAZ T , OHRIMENKO O . Structured encryption and leakage suppression [M ] . SHACHAM H, BOLDYREVA A, eds. Lecture Notes in Computer Science. Cham : Springer International Publishing , 2018 : 339 - 370 .

YUAN D D , ZUO C , CUI S J , et al . Result-pattern-hiding conjunctive searchable symmetric encryption with forward and backward privacy [J ] . Proceedings on Privacy Enhancing Technologies , 2023 , 2023( 2 ): 40 - 58 .

ZHU X L , FU S J , HU H P , et al . HCV: practical multi-keyword conjunctive query with little result pattern leakage [J ] . Security and Communication Networks , 2023 , 2023 : 8351353 .

GUO C , LI W F , TANG X Y , et al . Forward private verifiable dynamic searchable symmetric encryption with efficient conjunctive query [J ] . IEEE Transactions on Dependable and Secure Computing , 2024 , 21 ( 2 ): 746 - 763 .

LAI S Q , PATRANABIS S , SAKZAD A , et al . Result pattern hiding searchable encryption for conjunctive queries [C ] // Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security . New York : ACM , 2018 : 745 - 762 .

SYALIM A , NISHIDE T , SAKURAI K . Realizing proxy re-encryption in the symmetric world [C ] // Proceedings of Informatics Engineering and Information Science: International Conference , ICIEIS 2011 , Berlin, Heidelberg : Springer Berlin Heidelberg , 2011: 259 - 274 .

SAKURAI K , NISHIDE T , SYALIM A . Improved proxy re-encryption scheme for symmetric key cryptography [C ] // Proceedings of the 2017 International Workshop on Big Data and Information Security (IWBIS) . Piscataway : IEEE Press , 2017 : 105 - 111 .

COOK D L , KEROMYTIS A D . Conversion and proxy functions for symmetric key ciphers [C ] // Proceedings of International Symposium on Information Technology: Coding and Computin'(IT-C'05)- Volume II . Piscataway : IEEE Press , 2005 : 662 - 667 .

CHEON J H . Security analysis of the iffie Diffie-Hellman problem [C ] // Proceedings of the 24th Annual International Conference on the Theory and Applications of Cryptographic Techniques . New York : ACM , 2006 : 1 - 11 .

浏览量

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

暂无数据