一种支持动态可验证的密文检索方案

doi:10.19665/j.issn1001-2400.2022.01.004

摘要/Abstract

摘要：

针对搜索结果缺乏正确性验证和数据更新时产生的隐私泄露问题,提出一种支持动态可验证的密文检索方案。首先根据索引产生聚合消息认证码,将索引与聚合消息认证码进行加密后上传到区块链中,通过智能合约返回给用户搜索结果,解决恶意服务器返回结果不正确问题;其次,引入版本指针用来指向更新状态,使得每次更新状态下关键字产生的陷门不同,从而保证数据更新时不会泄露任何信息,并且巧妙地利用以太坊自身特性,将以太坊中外部账户地址与公钥进行匹配,对授权信息加密后发送交易,实现了数据拥有者对用户的授权访问控制。安全分析表明,本方案除满足自适应安全外,还满足前向和后向安全,可以很好地保护加密数据的安全性。实验结果表明,此方案减少了索引生成以及验证时间,并具有高效的搜索效率。

关键词: 搜索加密, 区块链, 前向安全, 后向安全, 访问控制

Abstract:

Aiming at the problem of privacy leakage caused by the lack of correctness verification of search results and data update,this paper proposes a Support dynamic and verifiable scheme for ciphertext retrieval.First,the AMAC is generated according to the index,the index and the AMAC are encrypted and uploaded to the blockchain,and the search results are returned to the user through the smart contract to solve the problem of incorrect results returned by the malicious server.Second,the version pointer is introduced to point to the update state,so that the trapdoor generated by the keyword in each update state is different,so as to ensure that no information is leaked when the data is updated.And this paper cleverly uses Ethereum's own characteristics to match the EOA in Ethereum with the public key,encrypt the authorization information and send the transaction,and realize the authorization access control of the data owner to the user.Finally,the security analysis shows that this scheme not only satisfies the self-adaptive security,but also meets the forward and backward security,and can well protect the security of encrypted data.Experimental results show that this solution reduces index generation and verification time,and is highly efficient in search.

Key words: searchable encryption, blockchain, forward security, backward security, access control

中图分类号:

TP301.6

杜瑞忠,王一,田俊峰. 一种支持动态可验证的密文检索方案[J]. 西安电子科技大学学报, 2022, 49(1): 35-46.

DU Ruizhong,WANG Yi,TIAN Junfeng. Support dynamic and verifiable scheme for ciphertext retrieval[J]. Journal of Xidian University, 2022, 49(1): 35-46.

图/表 8

表1

符号定义"

符号	定义	符号	定义
λ	安全参数	N_max	包含关键字的最大索引数量
h₁,h₂,h₃,h₄,h₅,H₁,H₂,H₃,G	安全哈希函数	M	MAC集合
P(P^-1)	伪随机置换函数	AM	AMAC集合
F	外包文档集合	DB(w_i)_addition	需要增加包含关键字w_i的文档集合
C	加密文档集合	DB(w_i)_deletion	需要删除包含关键字w_i的文档集合
K_m,K_f	密钥	(s $t c w i$ ,c)	版本指针c对应的更新状态
OP	增加或者删除操作	AM(w_i)	包含关键字w_i的打包索引对应的AMAC集合
W	关键字集合	PDB(w_i)	包含关键字w_i的打包索引集合
ID	文档标识符集合	EI $D j w i$	对应的加密索引

表1

图1

图2

图3

表2

图4

图5

图6

参考文献 23

[1]	SONG D X, WAGNER D, PERRIG A. Practical Techniques for Searches on Encrypted Data[C]// Proceeding 2000 IEEE Symposium on Security and Privacy.S&P 2000.Piscataway:IEEE, 2000:44-55.
[2]	GOH E J. Secure Indexes (2003)[J/OL]. [2003-10-07]. https://eprint.iacr.org/2003/216.
[3]	CURTMOLA R, GARAY J, KAMARA S, et al. Searchable Symmetric Encryption:Improved Definitions and Efficient Constructions[J]. Journal of Computer Security, 2011, 19(5):895-934. doi: 10.3233/JCS-2011-0426
[4]	KAMARA S, PAPAMANTHOU C, ROEDER T. Dynamic Searchable Symmetric Encryption[C]// Proceedings of the 2012 ACM Conference on Computer and Communications Security. New York: ACM, 2012:965-976.
[5]	MIAO Y, TONG Q, DENG R, et al. Verifiable Searchable Encryption Framework Against Insider Keyword-Guessing Attack in Cloud Storage[J]. IEEE Transactions on Cloud Computing, 2020:1-14.
[6]	LIANG Y, LI Y, CAO Q, et al. VPAMS:Verifiable and Practical Attribute-Based Multi-Keyword Search over Encrypted Cloud Data[J]. Journal of Systems Architecture, 2020, 108:101741. doi: 10.1016/j.sysarc.2020.101741
[7]	YANG W, ZHU Y. A Verifiable Semantic Searching Scheme by Optimal Matching Over Encrypted Data in Public Cloud[J]. IEEE Transactions on Information Forensics and Security, 2020, 16:100-115. doi: 10.1109/TIFS.2020.3001728
[8]	TONG Q, MIAO Y, LIU X, et al. VPSL:Verifiable Privacy-Preserving Data Search for Cloud-Assisted Internet of Things[J]. IEEE Transactions on Cloud Computing, 2020 (Early Access):1-13.
[9]	SHARMA D, JINWALA D. Simple Index Based Symmetric Searchable Encryption with Result Verifiability[J]. Frontiers of Computer Science, 2021, 15(2):1-3.
[10]	KUROSAWA K, OHTAKI Y. How to Update Documents Verifiably in Searchable Symmetric Encryption[C]// International Conference on Cryptology and Network Security.Heidelberg:Springer, 2013:309-328.
[11]	ZHU J, LI Q, WANG C, et al. Enabling Generic,Verifiable,and Secure Data Search in Cloud Services[J]. IEEE Transactions on Parallel and Distributed Systems, 2018, 29(8):1721-1735. doi: 10.1109/TPDS.2018.2808283
[12]	WANG B, FAN X. Lightweight Verification for Searchable Encryption[C]// 2018 17th IEEE International Conference on Trust,Security and Privacy in Computing and Communications/12th IEEE International Conference on Big Data Science and Engineering (TrustCom/BigDataSE).Piscataway:IEEE, 2018:932-937.
[13]	STEFANOV E, PAPAMANTHOU C, SHI E. Practical Dynamic Searchable Encryption with Small Leakage (2013)[J/OL]. [2013-12-08]. https://eprint.iacr.org/2013/832.
[14]	BOST R. ∑oφo: Forward Secure Searchable Encryption[C]// Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security. New York: ACM, 2016:1143-1154.
[15]	YONEYAMA K, KIMURA S. Verifiable and Forward Secure Dynamic Searchable Symmetric Encryption with Storage Efficiency[C]// International Conference on Information and Communications Security.Heidelberg:Springer, 2017:489-501.
[16]	BOST R, MINAUD B, OHRIMENKO O. Forward and Backward Private Searchable Encryption from Constrained Cryptographic Primitives[C]// Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security. New York: ACM, 2017:1465-1482.
[17]	LI H, ZHANG F, HE J, et al. A Searchable Symmetric Encryption Scheme Using BlockChain (2017)[J/OL]. [2017-11-18]. https://arxiv.org/abs/1711.01030.
[18]	HU S, CAI C, WANG Q, et al. Searching an Encrypted Cloud Meets Blockchain:A Decentralized,Reliable and Fair Realization[C]// IEEE INFOCOM 2018-IEEE Conference on Computer Communications.Piscataway:IEEE, 2018:792-800.
[19]	CHEN L, LEE W K, CHANG C H, et al. Blockchain Based Searchable Encryption for Electronic Health Record Sharing[J]. Future Generation Computer Systems, 2019, 95:420-429. doi: 10.1016/j.future.2019.01.018
[20]	JIANG S, LIU J, WANG L, et al. Verifiable Search Meets Blockchain:A Privacy-Preserving Framework for Outsourced Encrypted Data[C]// ICC 2019-2019 IEEE International Conference on Communications.Piscataway:IEEE, 2019:1-6.
[21]	LI H, TIAN H, ZHANG F, et al. Blockchain-Based Searchable Symmetric Encryption Scheme[J]. Computers & Electrical Engineering, 2019, 73:32-45.
[22]	CHEN B, WU L, WANG H, et al. A Blockchain-Based Searchable Public-Key Encryption with Forward and Backward Privacy for Cloud-Assisted Vehicular Social Networks[J]. IEEE Transactions on Vehicular Technology, 2020, 69(6):5813-5825. doi: 10.1109/TVT.2019.2959383
[23]	李涵, 张晨, 黄荷姣, 等. 一种支持前向安全更新和验证的加密搜索算法[J]. 西安电子科技大学学报, 2020, 47(5):48-56.
	LI Han, ZHANG Chen, HUANG Hejiao, et al. Algorithm for Encrypted Search with Forward Secure Updates and Verification[J]. Journal of Xidian University, 2020, 47(5):48-56.

方案	区块链系统	授权访问	完全更新	一对多模型	更新数据验证	前向与后向安全
文献[11]	No	No	Yes	Yes	Yes
文献[12]	No	No	Yes	No	Yes
文献[18]	Yes	No	Yes	Yes	No	No
文献[19]	Yes	No	No	Yes
文献[20]	Yes	Yes	No	Yes	No	No
文献[22]	Yes	No	Yes	No	No	Yes
文中方案	Yes	Yes	Yes	Yes	Yes	Yes