面向云环境的一致性可验证单关键词检索方法  

Integrity-verifying Single Keyword Search Method in Clouds

作　　者：戴华[1,2] 保静静 朱向洋 易训 杨庚 DAI Hua;BAO Jing-jing;ZHU Xiang-yang;YI Xun;YANG Geng(College of Computer Science,Nanjing University of Posts and Telecommunications,Nanjing 210023,China;Jiangsu Key Laboratory of Big Data Security&Intelligent Processing,Nanjing 210023,China;School of Science,Royal Melbourne Institute of Technology University,Melbourne 3000,Australia)

机构地区：[1]南京邮电大学计算机学院,南京210023 [2]江苏省大数据安全与智能处理重点实验室,南京210023 [3]墨尔本皇家理工大学理学院

出　　处：《计算机科学》2018年第12期92-97,110,共7页Computer Science

基　　金：国家自然科学基金项目(61872197;61572263;61672297;61472193);江苏省自然科学项目(BK20151511;BK20161516);中国博士后科学基金(2015M581794);江苏省高校自然科学研究项目(15KJB520027);安徽省自然科学基金项目(1608085MF127);江苏省博士后科研资助计划(1501023C);南京邮电大学自然科学基金项目(NY217119)资助

摘　　要：在云环境资源外包服务模式下,数据拥有者不再参与对其外包数据的直接管理,这就使得验证数据使用者获得的检索结果是否满足一致性成为具有挑战性的问题。现有的研究工作重点聚焦于解决云服务提供商满足"诚实而好奇"模型假设下的隐私保护问题,但并不能解决恶意攻击威胁模型下的检索结果一致性验证问题。针对云服务提供商恶意攻击威胁模型,提出了一种面向云环境的基于偏序约束链的一致性可验证单关键词检索方法——IVSKS。数据拥有者根据文档与关键词的相关度的偏序关系,构造用于检索结果一致性验证的偏序约束链验证编码信息,并将该信息与文档集共同外包存储至云端;数据使用者在执行单关键词检索时,云端返回检索结果文档集以及相应的验证编码;最后,数据使用者根据获得的检索结果重构验证编码,实现针对检索结果的一致性验证。实验表明,与同类方法相比,IVSKS在检索结果冗余度以及一致性验证时间开销上具有更好的表现。The service of outsourcing resources in clouds makes the data out of control from its owner and generates many security issues.It has become a serious threat to data users to verify the integrity of search results received from clouds.In the area of secure keyword search for cloud computing,current works mainly focus on the privacy-preserving issues which adopts the honest-but-curious threat model,but they are not able to solve the problem of integrity verification of the search result while the malicious attack threat model is adopted.This paper proposed a method of verifiable single keyword searching based on the partially ordered constraint chain,called IVSKS.According to the partial order relation of the relevance between keywords and files,data owner constructs the partial ordered constraint chains as verification objects of files,which are generated by hash functions.The verification objects and the corresponding files are subsequently outsourced together to clouds.When data users search the top-k relevance files by an interested keyword,the clouds will return the qualified files along with the corresponding verification objects.Data users can reconstruct the verification objects by these files and make a comparison to determine whether the result files are complete or correct.The experimental results indicate that IVSKS performs better on search result redundancy and completeness verification efficiency compared with the existing methods.

关 键 词：云计算 关键词检索 一致性验证 TOP-K 偏序约束链 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]