面向云存储的带关键词搜索的公钥加密方案

郭丽峰; 李智豪; 胡磊

doi:10.7544/issn1000-1239.2020.20190671

面向云存储的带关键词搜索的公钥加密方案

¹(山西大学计算机与信息技术学院太原 030006)
²(山西大学大数据科学与产业研究院太原 030006)
³(信息安全国家重点实验室(中国科学院信息工程研究所) 北京 100093) (lfguo@sxu.edu.cn)

基金项目: 山西省自然科学基金面上项目(201901D111029)；山西省重点研发项目(国际科技合作方面)(201903D421003)；国家自然科学基金项目(61202365，61872226，61732021)；山西省自然科学基金项目(201701D121052)；山西省高等学校科技创新项目(2019L0114)

详细信息

中图分类号: TP309
计量
- 文章访问数: 1114
- HTML全文浏览量: 4
- PDF下载量: 371
出版历程
- 发布日期: 2020-06-30

Efficient Public Encryption Scheme with Keyword Search for Cloud Storage

¹(School of Computer and Information Technology, Shanxi University, Taiyuan 030006)
²(Research Institute of Big Data Science and Industry, Shanxi University, Taiyuan 030006)
³(State Key Laboratory of Information Security (Institute of Information Engineering, Chinese Academy of Sciences), Beijing 100093)

Funds: This work was supported by the General Program of the Natural Science Foundation of Shanxi Province of China (201901D111029), the Key Reseach and Development Program (International Science and Technology Cooperation Project) of Shanxi Province of China (201903D421003), the National Natural Science Foundation of China (61202365, 61872226, 61732021), the Natural Science Foundation of Shanxi Province of China (201701D121052), and the Scientific and Technological Innovation Programs of Higher Education Institutions in Shanxi Province (STIP) (2019L0114).

摘要

摘要: 广泛应用于云存储环境的带关键词搜索的公钥加密体制(public key encryption with keyword search, PEKS)不仅能保证所存储数据的隐私，而且具有搜索功能. 针对抵制内部离线关键词猜测攻击问题，目前的解决方案是通过引入发送者的私钥，使得密文实现认证功能，从而抵制内部的离线关键词猜测攻击，但是此方法使得接收者必须事先指定发送者，这不符合实际要求. 为此，提出一个高效的带关键词搜索的公钥加密方案而且在标准模型下可证明安全. 该方案有3个优势：1)通过引入发送者和服务器的身份，实现了抵制内部和外部离线关键词猜测攻击，而且不需要接收者指定发送者；2)通过引入服务器的公私钥对，陷门可以在公开信道传输；3)因为任何人都可验证关键词密文的正确性，该方案能够抵制选择关键词密文攻击.
- 可搜索加密 /
- 关键词搜索 /
- 在线和离线的关键词猜测攻击 /
- 双线性对 /
- 陷门
Abstract: Public key encryption with keyword search (PEKS) is a promise cryptography technique in cloud storage which not only can ensure the privacy of stored data but also has search function. In order to resist internal off-line keyword guessing attack, the current solution is to introduce the sender’s secret key and public key to make the keyword ciphertext to realize authentication function. But in these schemes, the receiver must delegate the sender in advance. This situation does not meet the actual requirements that the receiver does not want to delegate the sender. In order to satisfy these applications, we propose an efficient PEKS scheme and prove its security in the standard model. Our PEKS scheme achieves three advantages: Firstly, by introducing the identity of the sender and the server, our scheme can resist the internal and external off-line keyword guessing attack. Furthermore, the scheme doesn’t need to delegate the sender; secondly, by introducing the server’s private key and public key, the trapdoor can be transmitted by a public channel; thirdly, because anyone can verify the correctness of the keyword search ciphertext of keyword search, the scheme can resist chosen keyword ciphertext attack.
- searchable encryption /
- keyword search /
- online and offline keyword guessing attacks /
- bilinear pairing /
- trapdoor

HTML全文

参考文献(0)

施引文献(8)

期刊类型引用(5)

1.	闫庆文，郭影，刘文芬，陈文，陆永灿. 一种灵活性高的16比特S盒设计方法. 计算机技术与发展. 2025(03): 91-98 . 百度学术
2.	武小年，吴庭，黄昭文，张润莲. 基于复合混沌系统的S盒构造与优化方法. 计算机科学与探索. 2025(04): 1095-1104 . 百度学术
3.	马俊. 基于AES对称加密算法的电子商务敏感数据加密存储研究. 佳木斯大学学报(自然科学版). 2024(06): 45-48 . 百度学术
4.	武小年，豆道饶，韦永壮，张润莲，李灵琛. 基于Feistel-NFSR结构的16比特S盒设计方法. 密码学报. 2023(01): 146-154 . 百度学术
5.	武小年，舒瑞，豆道饶，张润莲，韦永壮. 基于L-M-NFSR结构的16比特S盒设计方法. 计算机科学与探索. 2023(10): 2511-2518 . 百度学术