首页|基于云存储的多关键字可搜索加密方案

基于云存储的多关键字可搜索加密方案

扫码查看
尽管基于属性的可搜索加密(Attribute-Based Searchable Encryption,ABSE)能够安全有效地实现对密文的可控搜索,但目前的多关键字ABSE方案计算开销过大,且大量数据存储在云服务器中,存在数据冗余问题.针对上述问题,文章提出一种基于云存储的多关键字可搜索加密方案,采用云边缘协同的工作模式,将加密数据存储在云服务器上,同时将加密索引上传到最近的边缘节点,进行关键字搜索和协助解密,降低系统开销.为了进一步减轻客户端的计算开销,方案还采用了预加密机制.同时方案通过设置数据标签实现数据去重功能,引入验证算法保证搜索结果的完整性和正确性.安全性分析和性能分析证明了方案的有效性和实用性,与其他方案对比证明了方案具有更好的性能和更全面的功能.
Multi-Keyword Searchable Encryption Scheme Based on Cloud Storage
Attribute-based searchable encryption(ABSE)enables secure and efficient controlled searches on encrypted data.However,existing multi-keyword ABSE schemes suffer from excessive computational overhead.Moreover,the prevalence of storing a substantial volume of data in cloud servers further exacerbates the problem of data redundancy.This paper proposed a cloud-based multi-keyword searchable encryption scheme to address the aforementioned issues.The scheme introduced a cloud-edge collaborative working model.Encrypted data was stored on cloud servers.Meanwhile,encrypted indexes were uploaded to the nearest node to perform keyword search and assisted decryption,reducing the system overhead.To further alleviate the client's computational costs,the scheme employed a pre-encryption mechanism.Additionally,the scheme employed data tagging to achieve data deduplication and introduced verification algorithms to ensure the integrity and correctness of search results.Security analysis and performance evaluation demonstrate the effectiveness and practicality of the proposed scheme.The comparison with other schemes reveal that the proposed scheme outperforms in terms of performance and offers more comprehensive functionality.

attribute-based encryptionciphertext verificationpre-encryptioncloud-edge collaborationdata deduplication

谢小凤、张鑫涛、王鑫、鲁秀青

展开 >

青岛大学计算机科学技术学院,青岛 266071

属性基加密 密文验证 预加密 云边缘协同 数据去重

山东省自然科学基金

ZR2019MF058

2024

信息网络安全
公安部第三研究所 中国计算机学会计算机安全专业委员会

信息网络安全

CSTPCDCHSSCD北大核心
影响因子:0.814
ISSN:1671-1122
年,卷(期):2024.24(9)