具有高效授权的无证书公钥认证可搜索加密方案  

A certificateless public key authenticated searchable encryption scheme with efficient authorization

作　　者：郎晓丽 曹素珍 刘祥震 张玉磊 王斐 LANG Xiao-li;CAO Su-zhen;LIU Xiang-zhen;ZHANG Yu-lei;WANG Fei(College of Computer Science and Engineering,Northwest Normal University,Lanzhou 730070,China)

机构地区：[1]西北师范大学计算机科学与工程学院,甘肃兰州730070

出　　处：《计算机工程与科学》2020年第3期418-426,共9页Computer Engineering & Science

基　　金：国家自然科学基金(61662071,61662069,61462077)。

摘　　要：设计了1个高效授权的无证书密码环境下的公钥认证可搜索加密方案的安全模型,并提出了具体的具有高效授权的无证书公钥认证可搜索加密方案。该方案中云服务器利用数据属主对密文关键词索引的签名进行数据属主的身份验证;其次,数据用户对授权服务器进行授权,授权服务器可以对数据用户进行验证,若数据用户合法,则协助数据用户对云服务器返回的密文执行有效性的验证;同时,数据属主与数据用户利用云服务器公钥生成的密文关键词索引与陷门搜索凭证,可以保证密文关键词索引与陷门搜索凭证满足公开信道中的传输安全。最后使用仿真验证了所提方案的效率。This paper designs a security model of the public key authenticated searchable encryption scheme in efficiently authoried certificateless environments,and proposes a specific certificateless public key authenticated searchable encryption scheme with efficient authorization.In this scheme,the cloud server uses the signature of the data owner on the ciphertext keyword index to verify the data owner identity.Secondly,the data user authorizes the authorization server to verify the identity of the data user.If the data user is legal,the server help the data user to verify the validity of the ciphertext returned by the cloud server.At the same time,the data owner and the data user use the cloud server public key to generate the ciphertext keyword index and the trapdoor search credentials that satisfies the transmission security on the public channel.Finally,the efficiency of the proposed scheme is verified by experimental simulation.

关 键 词：可搜索加密 公钥认证 授权 数据用户身份验证 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]