基于单断言的安全的密文区间检索  

Secure Range Query with Single Assertion on Encrypted Data

作　　者：蔡克[1] 张敏[1] 冯登国[1] 

机构地区：[1]中国科学院软件研究所信息安全国家重点实验室,北京100190

出　　处：《计算机学报》2011年第11期2093-2103,共11页Chinese Journal of Computers

基　　金：核高基重大专项课题(2010ZX01042-001-001-05);中国科学院知识创新工程领域前沿项目-云计算安全支撑系统(YYYJ-1013)资助

摘　　要：为解决数据外包所带来的敏感数据的数据安全问题,数据所有者更多地选择外包敏感数据的密文.而外包密文的形式,为数据所有者对这些数据的使用带来了不便,如数据所有者无法对密文数据进行区间检索等.目前的密文区间检索方案中,为实现密文的区间检索,服务器需要对区间索引进行多次断言.而断言次数越多,向服务器泄露的信息也越多.文中提出采用单断言实现敏感数据的区间判断,同时使用可逆矩阵对区间索引和区间陷门进行安全保护,不仅减少了整个方案的信息泄露,而且保证了区间索引和区间陷门的安全.文中对方案复杂性进行了分析.该方案在安全性方面的提升并不以效率损失为代价.The outsourcing of sensitive data will bring in some security issues to the data.In order to avoid it,the data owner prefers to encrypt the sensitive data before outsourcing them.Thought the encryption can protect this confidentiality of sensitive data,it is inconvenient for the data owner to use them.For example,the data owner cannot directly make a range query on these encrypted sensitive data any more.To solve it,we usually build interval index for every sensitive data.To realizing whether a sensitive data belongs to a search range,in the previous solutions,the server needs to assert the interval index many times.The more times the server asserts the interval index,the more information that will be revealed to the server.These revealed information risk the confidentiality sensitive data.In this paper,we propose a schema of range query on encrypted data,which reduces the amount of information leakage by only asserting the interval index once.This revealed information such as interval indexes and interval trapdoors,are multiplied with invertible matrix to guarantee the security issues of the sensitive data and the search range.The analyses of complicity can tell the truth,that this schema achieves high level needs of security without losing of efficiency.

关 键 词：密文检索 区间检索 区间索引 区间陷门 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]