支持快速范围搜索的公钥可搜索加密方案  

Public-key searchable encryption scheme for supporting fast range search

作　　者：丁勇[1,2] 文能翔 王海燕 罗富财 DING Yong;WENG Nengxiang;WANG Haiyan;LUO Fucai(College of Computer Science&Information Security,Guilin University of Electronic Technology,Guilin 541004,China;School of Advanced Education,Hong Kong University of Science and Technology,Institute of Cyber Space Technology,Hong Kong 000000,China;School of Mathematics&Computer Science,Guilin University of Electronic Technology,Guilin 541004,China;Department of New Network,Peng Cheng Laboratory,Shenzhen 518000,China;College of Computer Science and Technology,Zhejiang Gongshang University,Hangzhou 310018,China)

机构地区：[1]桂林电子科技大学计算机科学与信息安全学院,广西桂林541004 [2]香港科技大学高等教育学院网络空间科技研究所,中国香港000000 [3]桂林电子科技大学数学与计算科学学院,广西桂林541004 [4]鹏城实验室新型网络研究部,广东深圳518000 [5]浙江工商大学计算机科学与技术学院,浙江杭州310018

出　　处：《西安电子科技大学学报》2024年第6期204-214,共11页Journal of Xidian University

基　　金：广西自然科学基金(2022GXNSFBA035650);广西科技计划项目(桂AA22068067);国家自然科学基金(61962012);广西自然科学基金(2019GXNSFGA245004);鹏城实验室重大任务项目(PCL2024A05)。

摘　　要：近年来,云存储服务逐渐成为数据存储的主流方式,但同时也带来了数据隐私保护的挑战。公钥可搜索加密技术允许用户在加密数据上执行关键词搜索,而无需解密数据,从而在保护隐私的同时提供了数据检索的便利,因此得到了广泛应用。但目前大多数可搜索加密方案存在范围搜索效率低与难以抵御关键字猜测攻击的问题。为解决这一问题,利用0-1编码构造了一种支持高效范围搜索的公钥可搜索加密方案,并引入公钥认证使发送者与接收者两方协同加密,防止第三方构造有效密文与陷门,以保证方案的安全性。为提高搜索计算的效率,利用陷门搜索记录构建密文索引,对新旧陷门的搜索范围进行比较并结合密文索引,可减少需比对密文数量,从而实现快速搜索。安全分析表明,该方案可以抵御云服务器的关键字猜测攻击,实验结果表明,该方案的密文索引能有效提高密文搜索的效率。In recent years,cloud storage services have gradually become the mainstream method for data storage,but they have also brought challenges to data privacy protection.Public Key Searchable Encryption technology allows users to perform keyword searches on encrypted data without decrypting it,thereby providing the convenience of data retrieval while protecting privacy,so that it has been widely used.However,most searchable encryption schemes currently suffer from low efficiency in range searches and vulnerability to keyword guessing attacks.To address this issue,this paper constructs a public-key searchable encryption scheme that supports efficient range searches using 0-1 encoding,and introduces public key authentication to enable collaborative encryption between sender and receiver,thus preventing third parties from constructing valid ciphertexts and trapdoors and ensuring the security of the scheme.To improve the efficiency of search computations,this paper constructs ciphertext indices using trapdoor search records,comparing the search ranges of new and old trapdoors and combining ciphertext indices to reduce the number of ciphertexts that need to be compared,thus achieving fast searches.Security analysis shows that this scheme can resist keyword guessing attacks from cloud servers,and experimental results demonstrate that the ciphertext indices of this scheme can effectively improve the efficiency of ciphertext searches.

关 键 词：公钥可搜索加密 0-1编码 公钥认证 密文索引 范围搜索 

分 类 号：TN918.4[电子电信—通信与信息系统]