基于PIR增强的可搜索加密方案研究

唐亮; 马利民

doi:10.11959/j.issn.2096-109x.2025054

您当前的位置：

首页 >

文章列表页 >

基于PIR增强的可搜索加密方案研究

学术论文 | 更新时间：2025-11-08

- 基于PIR增强的可搜索加密方案研究
- Research on searchable encryption scheme based on enhanced PIR
- 网络与信息安全学报 2025年11卷第5期页码：115-125
- 作者机构：
  
  1.北京教育科学研究院，北京 100036
  2.北京信息科技大学计算机学院，北京 102206
- 作者简介：
  
  [ "唐亮（1982- ），男，江苏宿迁人，北京教育科学研究院高级工程师，主要研究方向为教育数字化与网络安全、区块链、隐私计算。" ]
  [ "马利民（1983- ），男，山东新泰人，北京信息科技大学副教授，主要研究方向为密码技术、区块链、隐私计算和数据安全。" ]
- 基金信息：
  
  国家重点研发计划(2022YFC3320903);未来区块链与隐私计算高精尖创新中心(GJJ-24-016)
- DOI：10.11959/j.issn.2096-109x.2025054
  中图分类号： TP393
- 收稿：2025-02-05，
  
  修回：2025-05-29，
  
  纸质出版：2025-10-25
- 稿件说明：
移动端阅览
唐亮, 马利民. 基于PIR增强的可搜索加密方案研究[J]. 网络与信息安全学报, 2025, 11(5): 115-125.

TANG L, MA L M. Research on searchable encryption scheme based on enhanced PIR[J]. Chinese Journal of Network and Information Security, 2025, 11(5): 115-125.
唐亮, 马利民. 基于PIR增强的可搜索加密方案研究[J]. 网络与信息安全学报, 2025, 11(5): 115-125. DOI： 10.11959/j.issn.2096-109x.2025054.

TANG L, MA L M. Research on searchable encryption scheme based on enhanced PIR[J]. Chinese Journal of Network and Information Security, 2025, 11(5): 115-125. DOI： 10.11959/j.issn.2096-109x.2025054.

摘要

采用可搜索加密技术对数据加密后再存储云服务器，虽能在一定程度上兼顾数据的安全性与可用性，但基于该技术的系统在访问模式或搜索模式层面存在泄露用户隐私的风险。针对这一问题，提出了一种隐私信息检索增强的可搜索加密方案。在方案预处理阶段，首先对数据库进行分区及预处理，同步完成陷门与关键字密文的计算，并存储分区相关信息。这一设计不仅能降低系统的计算开销与通信开销，还能提升后续查询效率。在实际查询流程中，服务器接收客户端的查询请求后，会先对陷门进行验证以实现精准的访问控制，再对经过同态加密的数据执行运算。从整体执行逻辑来看，攻击者无法通过系统交互过程推断出用户查询的具体内容，从而有效解决了访问模式泄露问题；同时，服务器无法建立陷门、关键字密文与查询内容之间的关联关系，有效避免了搜索模式泄露。实验结果表明，当数据量持续增长时，该方案的计算开销优势逐渐凸显。与传统隐私信息检索技术相比，所提方案的查询时间减少了约80%。

Abstract

Data was encrypted with searchable encryption technology before being uploaded to the cloud

which could

to a certain extent

balance data security and usability. However

systems based on this technology were found to carry the risk of exposing user privacy at the access or search pattern level. To address this issue

an enhanced searchable encryption scheme for privacy information retrieval was proposed. In the preprocessing stage of the scheme

the database was first partitioned and preprocessed. The trapdoor and keyword ciphertext were calculated simultaneously

and partition-related information was stored. This design was shown to not only reduce the computational and communication costs of the system but also improve subsequent query efficiency. In the actual query process

after the query request from the client was received by the server

the trapdoor was verified to achieve precise access control. Then

operations were performed on the data that had undergone homomorphic encryption. From the overall execution logic

the specific content of the user’s query could not be inferred by attackers through the system interaction process

thus effectively solving the problem of access pattern leakage. Simultaneously

the association relationship between the trapdoor

keyword ciphertext

and the query content could not be established by the server

effectively avoiding search pattern leakage. Experimental results show that as the data volume continues to increase

the computational cost advantage of this scheme becomes increasingly prominent. Compared with traditional privacy information retrieval protocols

the query time is reduced by approximately 80% in the proposed scheme.

关键词

Keywords

references

FENG H , JIAO H L , ZHANG C Y , et al . The model and method of information security data leakage detection and prevention [C ] // Proceedings of the 2024 International Conference on Data Science and Network Security (ICDSNS) . Piscataway : IEEE Press , 2024 : 1 - 5 .

高汉成 , 吉浩宇 , 高晨昊 , 等 . 基于区块链的个人健康护照存储、共享与验证方案 [J ] . 网络与信息安全学报 , 2024 , 10 ( 2 ): 95 - 105 .

GAO H C , JI H Y , GAO C H , et al . Individual health passport storage, sharing and verification scheme based on blockchain [J ] . Chinese Journal of Network and Information Security , 2024 , 10 ( 2 ): 95 - 105 .

LU Y X , JAFAR S A . On single server private information retrieval with private coded side information [J ] . IEEE Transactions on Information Theory , 2023 , 69 ( 5 ): 3263 - 3284 .

ANDOLA N , GAHLOT R , YADAV V K , et al . Searchable encryption on the cloud: a survey [J ] . The Journal of Supercomputing , 2022 , 78 ( 7 ): 9952 - 9984 .

WANG Y L , SUN S F , WANG J F , et al . Achieving searchable encryption scheme with search pattern hidden [J ] . IEEE Transactions on Services Computing , 2022 , 15 ( 2 ): 1012 - 1025 .

AMORIM I , COSTA I . Leveraging searchable encryption through homomorphic encryption: a comprehensive analysis [J ] . Mathematics , 2023 , 11 ( 13 ): 2948 .

CHENG L X , MENG F . Public key authenticated encryption with keyword search from LWE [C ] // Proceedings of the 27th European Symposium on Research in Computer Security . Berlin : Springer , 2022 : 303 - 324 .

BEIMEL A , STAHL Y . Robust information-theoretic private information retrieval [J ] . Journal of Cryptology , 2007 , 20 ( 3 ): 295 - 321 .

XU W J , WANG B C , LU R X , et al . Efficient private information retrieval protocol with homomorphically computing univariate polynomials [J ] . Security and Communication Networks , 2021 ( 1 ): 5553256 .

REN L , MUGHEES M H , SUN I . Simple and practical amortized sublinear private information retrieval using dummy subsets [C ] // Proceedings of the 2024 on Conference on Computer and Communications Security . New York : ACM Press , 2024 : 1420 - 1433 .

ZHOU J C , ZHU X , CHEN C . Efficient dynamic searchable encryption scheme based on bitslicing [J ] . Netinfo Security , 2024 , 24 ( 9 ): 1309 - 1316 .

袁承昊 , 李勇 , 任爽 . 多关键词动态可搜索加密方案 [J ] . 网络与信息安全学报 , 2023 , 9 ( 2 ): 143 - 153 .

YUAN C H , LI Y , REN S . Dynamic multi-keyword searchable encryption scheme [J ] . Chinese Journal of Network and Information Security , 2023 , 9 ( 2 ): 143 - 153 .

MAKKONEN O , KARPUK D A , HOLLANTI C . Algebraic geometry codes for cross-subspace alignment in private information retrieval [C ] // Proceedings of the 2024 IEEE International Symposium on Information Theory (ISIT) . Piscataway : IEEE Press , 2024 : 2874 - 2879 .

邵航 , 高思琪 , 钟离 , 等 . 同态加密在隐私计算中的应用综述 [J ] . 信息通信技术与政策 , 2022 , ( 8 ): 75 - 88 .

SHAO H , GAO S Q , ZHONG L , et al . Homomorphic encryption protocols and applications in privacy preserving computation [J ] . Information and Communications Technology and Policy , 2022 ( 8 ): 75 - 88 .

LIU J F , LIN S . An efficient and more secure searchable encryption algorithm based on fully homomorphic encryption [C ] // Proceedings of the 2023 International Conference on Automation, Control and Electronics Engineering (CACEE) . Piscataway : IEEE Press , 2023 : 83 - 92 .

牛淑芬 , 刘文科 , 陈俐霞 , 等 . 基于联盟链的可搜索加密电子病历数据共享方案 [J ] . 通信学报 , 2020 , 41 ( 8 ): 204 - 214 .

NIU S F , LIU W K , CHEN L X , et al . Electronic medical record data sharing scheme based on searchable encryption via consortium blockchain [J ] . Journal on Communications , 2020 , 41 ( 8 ): 204 - 214 .

刘炜 , 白晓丹 , 佘维 , 等 . 基于倒排索引的可搜索加密数据共享方案 [J ] . 计算机工程与应用 , 2023 , 59 ( 10 ): 270 - 279 .

LIU W , BAI X D , SHE W , et al . Searchable encrypted data sharing scheme based on inverted index [J ] . Computer Engineering and Applications , 2023 , 59 ( 10 ): 270 - 279 .

BONEH D , KUSHILEVITZ E , OSTROVSKY R , et al . Public key encryption that allows PIR queries [C ] // Proceedings of the 27th Annual International Cryptology Conference(CRYPTO 2007) . Berlin : Springer , 2007 : 50 - 67 .

浏览量

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于同态加密和区块链技术的车联网隐私保护方案

基于隐私集合求交的大模型双向隐私授权

面向LBS的ADS-B报文定位数据本地化差分隐私保护方法

FL-IoV：基于联邦学习的综合车联网入侵检测方法

智能电网中隐私保护的多维多函数数据聚合方案