多用户场景支持多关键词模糊搜索的可搜索加密方案  

An efficient multi-user multi-keyword fuzzy search scheme over encrypted cloud storage

作　　者：凌华泽 薛开平[1] Wei David S.L. 李瑞东 Ling Huaze;Xue Kaiping;Wei David S.L.;Li Ruidong(School of Cyber Security,University of Science and Technology of China,Hefei,Anhui 230027,China;Computer and Information Science Department,Fordham University,NY 10458,USA;College of Science and Engineering,Kanazawa University,Kakuma-machi,Kanazawa 920-1192,Japan)

机构地区：[1]中国科学技术大学网络空间安全学院,安徽合肥230027 [2]美国福特汉姆大学计算机与信息科学系,美国纽约104583 [3]日本金泽大学科学与工程学院,石川金泽920-1192

出　　处：《中国科学技术大学学报》2021年第7期562-576,共15页JUSTC

基　　金：the National Natural Science Foundation of China(61972371);Youth Innovation Promotion Association of Chinese Academy of Sciences(CAS)(Y202093).

摘　　要：随着云计算平台的普及与推广,越来越多的企业和个人选择将数据外包到云以降低本地的维护成本,因此用于解决加密数据上关键字搜索问题的可搜索加密技术(searchable encryption,SE)变得越来越重要.模糊搜索概念的引入主要是为了解决查询关键词出现错误的情况.然而,现有的支持模糊搜索的可搜索加密方案不仅在多用户场景中具有很高的计算和通信开销,而且不能在保证有效准确率的前提下解决各种关键词错误类型.为此提出了一种多用户场景下支持多关键字模糊搜索的可搜索加密方案.具体来说,我们引入轮排索引来支持多关键字通配符搜索,可以以更高的正确率支持更多类型的模糊关键词.此外,通过让云服务器对索引信息进行重加密,本方案支持多用户场景非密钥共享的模糊搜索,有效降低了用户的计算开销并提高了隐私保护水平.实验结果表明,与现有方案相比,该方案不仅具有较高的准确率,而且能够以可接受的计算开销支持多种拼写错误的关键字搜索.As more and more enterprises and individuals choose to outsource their encrypted private data to the cloud,Searchable Encryption(SE),which solves the issue of keyword-searching over encrypted data,is becoming much more important.To overcome typos and semantic diversity existing in query requests,fuzzy search is introduced to achieve a misspelling-tolerate search-supported encryption scheme.However,current schemes of fuzzy search over encrypted data not only bring in high computing and communication overhead in multi-user scenarios but also are unable to cover all kinds of error types under the premise of an effective accuracy.In this paper,we thus propose a multi-user multi-keyword fuzzy searchable encryption scheme.Specifically,we introduce the permuterm index to support multi-keyword wildcard search which can solve more kinds of misspelling with a higher degree of correctness.Moreover,by letting the cloud server re-encrypt indexes user encrypt,our scheme supports unshared-key multi-user fuzzy search,reducing users'computing overhead effectively and improving the level of privacy-preserving.The results of experiments demonstrate that,compared with existing schemes,our scheme not only has a better accuracy rate,but also supports more varieties of misspelling keyword search with acceptable computational overhead.

关 键 词：加密云存储 代理重加密 隐私保护 可搜索加密 

分 类 号：TU459[建筑科学—岩土工程]