云存储中一种支持可验证的模糊查询加密方案  

Fuzzy Searchable Encryption Scheme Supporting Verification in Cloud Storage

作　　者：朱小玉[1] 刘琴[2] 王国军[3] 

机构地区：[1]中南大学信息科学与工程学院,长沙410083 [2]湖南大学信息科学与工程学院,长沙410082 [3]广州大学计算机科学与教育软件学院,广州510006

出　　处：《电子与信息学报》2017年第7期1741-1747,共7页Journal of Electronics & Information Technology

基　　金：国家自然科学基金(61632009;61472451;61272151;61402161)~~

摘　　要：针对当前可查询加密方案大多不支持模糊查询的不足,并且无法应对恶意服务器的威胁,云计算亟需为用户提供一种允许拼写错误并且可以验证查询结果正确性的加密方案。同时考虑到云存储中数据经常更新,提出一种动态云存储中支持可验证的模糊查询加密方案。该方案通过编辑距离生成模糊关键词集,并基于伪随机函数、随机排列函数等技术构建安全索引,从而保护用户的数据隐私。通过RSA累加器和哈希函数验证查询结果的正确性,用于检测恶意攻击者的非法行为。安全分析证明该方案能够保护用户的隐私安全,并具有可验证性。实验结果表明该方案具有可行性与有效性。Most of the existing searchable encryption schemes can not support fuzzy keyword search, and can not resist threats from malicious server, that the cloud computing needs to provide an encryption scheme, which can support typos and verification of the search result. Considering the data is updated frequently in cloud computing, a verifiable fuzzy searchable encryption scheme in dynamic cloud storage is presented. The proposed scheme constructs the fuzzy keyword set based on edit distance technique, and builds secure index based on pseudorandom function and random permutation, so as to protect the users＇ data privacy. The RSA accumulator and Hash function are used to verify the correctness of the search result, in order to detect the cheating behavior of the malicious attacker. The security analysis proves that the proposed scheme is privacy preserving and verifiable. The experiment results show that the proposed scheme is efficient.

关 键 词：云存储 隐私保护 模糊查询 可验证查询 加密方案 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]