分布式环境下多关键词并行密文检索方案  

Multi-keyword parallel ciphertext retrieval scheme in distributed environment

作　　者：戴厚乐 杨庚[1,2] 闵兆娥 DAI Houle;YANG Geng;MIN Zhao e(School of Computer Science, NanjingUniversity of Posts and Telecommunications,Nanjing Jiangsu210023, China;Jiangsu Key Laboratory of Big Data Securityand Intelligent Processing, Nanjing Jiangsu 210023, China)

机构地区：[1]南京邮电大学计算机学院、软件学院,网络空间安全学院,南京210023 [2]江苏省大数据安全与智能处理重点实验室,南京210023

出　　处：《计算机应用》2019年第10期2948-2954,共7页journal of Computer Applications

基　　金：国家自然科学基金资助项目(61572263,61502251);江苏省自然科学基金资助项目(BK20161516);江苏省高校自然科学研究项目(14KJB520031)~~

摘　　要：对于可搜索加密需要均衡数据的安全性和检索效率。针对SSE-1密文检索方案中检索性能低、单关键词检索模式不足和传统单服务器架构中的单机资源局限性等问题,设计并实现了一种多关键词并行密文检索系统。该系统采用不同的索引加密方式提高密文检索性能;通过对密文倒排索引的切分实现倒排索引的分块检索,克服了单机资源的局限性并提高了检索效率;通过结合分布式特点扩展了传统单机检索架构并实现了多关键词的并行检索。实验结果表明,与SSE-1方案相比,在保证密文数据安全性的前提下所提方案能够提高检索、更新等操作的效率,实现多关键词的检索,同时动态扩展系统分布式架构以提高系统负载能力。For searchable encryption, balancing the security and retrieval efficiency of data is important. Aiming at the low retrieval performance and the lack of single keyword search mode in SSE-1 ciphertext retrieval scheme, and the problems such as the limitation of single-machine resources in the traditional single-server architecture, a multi-keyword parallel ciphertext retrieval system was designed and implemented. Different index encryption strategies were used to improve the ciphertext retrieval performance. The block search of the inverted index was realized by partitioning the ciphertext inverted index, which solves the limitation of single-machine resources and improves the retrieval efficiency. The traditional single- machine retrieval architecture was extended and the parallel retrieval of multiple keywords was realized by combining the characteristic of distribution. Experimental results show that compared with the SSE-1 scheme, the proposed scheme has the efficiency of retrieval and update operations improved under the premise of ensuring ciphertext data security and realizes multi-keyword retrieval. At the same time, the distributed architecture of the system is dynamically expanded to improve the system load capacity.

关 键 词：可搜索加密 多关键词 分布式检索 倒排索引 索引切分 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]