面向关系数据库的可搜索加密审计证书系统研究  

Construction of Searchable Encrypted Audit Certificate Systems for Relational Database

作　　者：丁勇[1,2] 李世杰 王玉珏 陈锦雯[1] 袁方 张昆 DING Yong;LI Shi-Jie;WANG Yu-Jue;CHEN Jin-Wen;YUAN Fang;ZHANG Kun(Guangxi Key Laboratory of Cryptography and Information Security,Guilin University of Electronic Technology,Guilin 541004,China;Cyberspace Security Research Center,Pengcheng Laboratory,Shenzhen 518055,China;Foreign Affairs and Communications Administration,Beijing 100045,China;National Information Center,Bejing 100045,China)

机构地区：[1]桂林电子科技大学广西密码学与信息安全重点实验室,桂林541004 [2]鹏城实验室网络空间安全研究中心,深圳518055 [3]外交部通信总台,北京100045 [4]国家信息中心,北京100045

出　　处：《密码学报》2021年第3期432-443,共12页Journal of Cryptologic Research

基　　金：国家自然科学基金(61772150,61862012);广西自然科学基金(2018GXNSFDA281054,2019GXNSFFA245015,2019GXNSFGA245004);鹏城实验室网络空间安全研究中心网络仿真项目(PCL2018KP004);广西密码学与信息安全重点实验室研究课题(GCIS201930)。

摘　　要：随着大数据时代的来临,数据库的安全和监管受到越来越多的关注,确保数据库的安全且支持监管是重要的研究问题.可搜索加密审计证书系统可以有效地对用户对数据的加密操作行为进行审计.为同时满足对客户端数据的加解密、校验、审计的要求,针对关系数据库系统提出了基于可搜索加密的不可伪造审计证书方案.采用基于对称加密的可搜索加密方案,在保护客户端行为隐私的同时,允许审计人员根据用户可搜索加密审计证书进行数据审计,防止客户端伪造合法可搜索加密审计证书,保证了不可伪造性.With the advent of the big data era,much attention has been paid on database secu-rity and supervision.Ensuring database security and supporting supervision are important issues.A searchable encryption audit certificate system can effectively audit the user’s behavior on data encryp-tion operation.In order to meet the requirements of client data encryption,decryption,verification,and auditing,an unforgeable audit certificate scheme based on searchable encryption is proposed for relational database systems.The scheme adopts a searchable encryption scheme based on symmetric encryption.While protecting the privacy of the client’s behavior,it allows auditors to perform data audits based on the user’s searchable encryption audit certificate,thus,the scheme can prevent the client from forging a legal searchable encryption audit certificate,and ensure the unforgeability of audit certificate.

关 键 词：数据库系统 可搜索加密审计证书 隐私保护 不可伪造 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]