高级检索

    一种基于SHVE的连接查询动态对称可搜索加密方案

    Dynamic Searchable Symmetric Encryption Scheme for Conjunctive Queries Based on SHVE

    • 摘要: 对称可搜索加密(searchable symmetric encryption,SSE)因其较高的搜索效率得到了人们的广泛关注. 支持连接查询的对称可搜索加密方案可以提高方案的功能性. 然而现有大部分连接查询方案不支持对加密数据库的动态更新操作,结合静态对称隐藏向量加密(symmetric hidden vectors encryption, SHVE)的定义,提出支持动态数据更新的动态对称隐藏向量加密(dynamic SHVE,DSHVE)的定义,并在此定义下构造了一种适用于可搜索加密应用场景的DSHVE方案. 在此基础上,通过引入基于盲指数计算的不经意动态交叉标签,设计具有前向和后向隐私的向量数据存取结构,构造了支持连接查询的动态对称可搜索加密方案,给出了方案的详细工作过程和正式的安全性分析. 理论分析和实验结果表明,连接查询时,该方案能够在不明显增加存储和计算开销的前提下,有效避免泄露匹配文档索引之外的结果特征. 同时该方案能够仅通过单轮通信实现连接查询,具有较低的通信开销和较高的搜索效率.

       

      Abstract: Searchable symmetric encryption (SSE) has been widely concerned because of its high search efficiency. Supporting conjunctive queries can effectively improve the usability of the scheme. However, most of the existing schemes with supporting conjunctive queries just work on static databases, which do not support dynamic updates of encrypted database, such as add or delete operation. Combined with the definition of symmetric hidden vectors encryption (SHVE), a new definition, called dynamic symmetric hidden vectors encryption (DSHVE), is proposed. On the basis of this definition, a DSHVE scheme supporting update operations is constructed. At the same time, by designing oblivious dynamic cross-tags and critical data access structures based on blinded exponentiations, a dynamic searchable symmetrical encryption scheme with supporting conjunctive queries is constructed. Then details about our proposal are introduced and a formal analysis of its security is presented. Theoretic analysis and experimental results show that, without significantly increasing the storage and computing costs, only documents identifications that match the query are revealed, which avoiding revealing more result patterns. In addition, by a single round of communication for conjunctive queries, the proposed scheme has lower communication overhead and higher search efficiency.

       

    /

    返回文章
    返回