一种面向多用户访问授权的可搜索加密方法  

A searchable encryption method formulti-user access authorization

作　　者：彭海洋 董贵山[2,3] 郝尧 陈宇翔 成林 PENG Hai-yang;DONG Gui-shan;HAO Yao;CHEN Yu-xiang;CHENG Lin(Science and Technology on Communication Security Laboratory,Chengdu 610041,China;No.30 Research Institute of China Electronics Technology Group Corporation,Chengdu 610041,China;China Electronics Technology Cyber Security Co.,Ltd.,Chengdu 610041,China;China Information Security Evaluation Center,Beijing 100000,China)

机构地区：[1]保密通信重点实验室,成都610041 [2]中国电子科技集团公司第三十研究所,成都610041 [3]中国电子网络信息安全有限公司,成都610041 [4]中国信息安全测评中心,北京100000

出　　处：《信息技术》2022年第4期79-84,共6页Information Technology

基　　金：四川省科技计划项目(2020YFG0298,2021JDRC0077)。

摘　　要：针对常见的多用户可搜索加密方案中,所有用户拥有相同的搜索范围导致信息从内部用户泄露的问题,文中使用邻接索引,将访问控制的策略信息加入到索引结构之中并指向关键字对应的文件地址,访问策略中配置了该关键字对应的被允许访问的用户,通过策略管理实现了不同群组用户搜索范围的交叉授权访问,提高了信息在内部的利用率。在系统的安全性方面,文中使用了双线性对的困难问题假设,通过模拟攻击证明了系统的安全。通过理论分析与对比,发现基于分段式索引的可搜索加密技术在计算开销与存储开销综合表现上有一定的优势。Regarding the problem of information leakage from internal users caused by multi-user searchable encryption schemes that all users have the same search range,this article uses adjacency index to add access control policy information to the index structure and point to the file address corresponding to the keyword,and the access policy is configured with the users who are allowed to access the keyword.Through policy management,cross-authorized access to the search range of users in different groups is realized,and the internal utilization of information is improved.In terms of the security of the system,this paper uses the difficult problem assumption of bilinear pairing,and proves the security of the system through simulation attacks.Through theoretical analysis and comparison,it is found that the searchable encryption technology based on segmented index has certain advantages in terms of computing cost and storage cost.

关 键 词：密态存储 可搜索加密 访问控制 范围授权 双线性对 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]