基于倒排索引的可验证混淆关键字密文检索方案  

Verifiable Obfuscated Keyword Ciphertext Retrieval Scheme Based on Inverted Index

作　　者：杜瑞忠 李明月[1,2] 田俊峰 吴万青 DU Rui-Zhong;LI Ming-Yue;TIAN Jun-Feng;WU Wan-Qing(School of Cyberspace Security and Computer,Hebei University,Baoding 071002,China;Key Laboratory on High Trusted Information System of Hebei Province (Hebei University), Baoding 071002, China)

机构地区：[1]河北大学网络空间安全与计算机学院,河北保定071002 [2]河北省高可信信息系统重点实验室(河北大学),河北保定071002

出　　处：《软件学报》2019年第8期2362-2374,共13页Journal of Software

基　　金：国家自然科学基金(61572170,61170254);河北省自然科学基金(F2018201153,F2019201290);河北省高等学校科学技术研究基金(ZD2016043)~~

摘　　要：随着云计算的发展,以密文检索为核心技术的安全搜索问题日益成为国内外研究的热点.为了提高密文检索方案的安全性,提出了基于倒排索引的可验证混淆关键字密文检索方案.首先,在构建陷门时插入混淆关键字抵抗恶意云服务器的关键字攻击,同时引入数据缓存区,利用Pailliar加密技术对包含混淆关键字搜索结果进行盲计算,过滤掉包含目标关键字以外的密文数据,减少通信开销;其次,利用双线性映射生成标签验证搜索结果,并对方案在正确性、安全性和可靠性这3个方面进行了验证.在真实数据集上进行反复实验,理论分析和实验结果表明,该方案在保证检索效率的同时,比现有的密文检索方案有效地提高了密文检索的安全性.With the development of cloud computing, the issue of secure search with ciphertext retrieval as the key technology has become a hot topic at worldwide. In order to improve the security of the ciphertext retrieval scheme, a verifiable ciphertext retrieval scheme is designed based on inverted index. First, insert the confusion keywords when building trapdoorstoagainst a malicious cloud server's keywords attack. At the same time, the data cache area is introduced, which utilize the Pailliar encryption technology to blindly calculate the search results containing the obfuscated keywords, and the ciphertext data other than the target keyword is filtered out to reduce the communication overhead. Secondly, take advantage of bilinear maps generate tags to verify search results, and verify the scheme in terms of correctness, security and reliability. Repeated experiments on real data sets, theoretical analysis and experimental results show that the proposed scheme can improve the security of ciphertext retrieval compared with the existing ciphertext retrieval schemes while ensuring retrieval efficiency.

关 键 词：密文检索 可验证 混淆关键字 数据缓存区 双线性 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]