支持联合搜索的动态前向安全可搜索加密方案  

A Forward Secure Dynamic Searchable Encryption Scheme Supporting Conjunctive Search

作　　者：汤永利[1] 李静然 闫玺玺[1] 赵强 Tang Yongli;Li Jingran;Yan Xixi;Zhao Qiang(School of Computer Science and Technology,Henan Polytechnic University,Jiaozuo,Henan 454003)

机构地区：[1]河南理工大学计算机科学与技术学院,河南焦作454003

出　　处：《计算机研究与发展》2022年第8期1853-1866,共14页Journal of Computer Research and Development

基　　金：河南省高校科技创新团队项目(20IRTSTHN013);河南省高校基本科研业务费专项资金项目(NSFRF210312);河南省青年人才托举工程项目(2021HYTP008)。

摘　　要：前向安全可搜索加密方案可抵抗文件注入攻击,从而引起了广泛的关注,它保证了更新文件后,新加入的文件不会泄露先前文件的关键词信息.就前向安全可搜索加密方案而言,如何提升其安全性和运行效率是当下的研究热点.但现有的前向安全可搜索加密方案为了提升安全性,往往仅支持单关键词查询或者以牺牲部分查询功能为代价.针对可搜索加密文件更新时的隐私泄露问题和搜索功能不完善问题,提出一种支持联合搜索的前向安全可搜索加密方案.该方案在服务器端采用布谷鸟过滤器筛选符合查询条件的文件,且支持动态更新操作;通过引入密文等值测试技术对关键词进行隐藏,实现在搜索阶段不泄露关键词和文件信息的情况下进行搜索匹配.方案分析和实验表明所提方案满足自适应安全性,提供多关键词搜索,支持灵活的更新操作且具有较高的效率,更加适用于数据外包、电子邮件系统等实际应用场景.The forward secure searchable encryption scheme has attracted widespread attention because it can resist the file injection attacks.It ensures that after the document is updated,the newly added document will not disclose the keyword information of the previous document.As for as the forward secure searchable encryption scheme is concerned,improving its security and operation efficiency is the current research hotspot.However,in order to improve security,the existing forward secure searchable encryption schemes often only support single-keyword query or sacrifice part of the query function.Aiming at the problem of privacy leakage and imcomplete search function during documents update in searchable encryption,a forward secure searchable encryption scheme supporting conjunctive keyword search is proposed.The scheme uses a cuckoo filter on the cloud server to filter documents that meet the query conditions,and supports dynamic update operations.The ciphertext equality test technology is introduced to hide the keywords and search without revealing the keywords and documents information in the search phase.Security analysis and experiments show that the proposed scheme achieves adaptive security,provides multi-keyword search,supports flexible update operations and efficient,so it is more suitable for practical application scenarios such as data outsourcing and email systems.

关 键 词：可搜索加密 前向安全 联合查询 布谷鸟过滤器 密文等值测试 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]