多数据所有者场景下具有访问模式和搜索模式隐私的对称可搜索加密方案  

Symmetric Searchable Encryption with Access and Search Pattern Privacy in Multi-Data-Owner Settings

作　　者：侯欣怡 刘晋璐 张茜[1] 秦静[1] HOU Xin-Yi;LIU Jin-Lu;ZHANG Xi;QIN Jing(School of Mathematics,Shandong University,Jinan 250100,China)

机构地区：[1]山东大学数学学院,济南250100

出　　处：《密码学报》2023年第6期1241-1265,共25页Journal of Cryptologic Research

基　　金：国家自然科学基金(62072276,61772311)。

摘　　要：对称可搜索加密(symmetric searchable encryption,SSE)允许数据所有者将加密数据安全地外包给云服务器,同时保持关键词搜索的能力.大多数现有的可搜索加密方案为了保证方案的高效性会向服务器泄露访问和搜索模式,访问模式泄露了搜索陷门和被匹配文件之间的关系,搜索模式泄露了搜索陷门中是否包含相同的关键词.有研究表明,访问和搜索模式的泄露能够导致一些严重的攻击.本文给出一个多数据所有者场景下能够同时隐藏访问和搜索模式的SSE方案,只需要向服务器发送一个单一的关键词搜索陷门,就能够在不同密钥加密的文件上进行搜索,并且每一次关键词问询都会产生一个全新的混淆访问模式,从而同时隐藏了访问和搜索模式.最后在具有代表性的真实世界数据集上进行实验,说明了所提方案的实用性.Symmetric searchable encryption(SSE)allows data owners to securely outsource encrypted data to cloud servers while maintaining the ability to search for keywords.Most existing searchable encryption schemes leak access and search patterns to the server in order to ensure the efficiency of the scheme,while access pattern exposes the relationship between search trapdoors and matched files,and search pattern reveals whether the same keyword is included in the search trapdoor.Recent studies have shown that the disclosure of access and search patterns can lead to some serious attacks.Presented is an SSE scheme that can hide the access and search patterns at the same time in the scenario of multiple data owners.The data user only needs to send a single trapdoor to the server,and can search on indexes encrypted with different keys,and each keyword query will generate a new obfuscated access pattern,thus both access and search pattern are hidden.Finally,experiments are carried out on a representative real-world dataset to demonstrate that the proposed scheme is practical.

关 键 词：云计算 可搜索加密 访问模式隐藏 搜索模式隐藏 多数据所有者 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]