云环境下安全密文区间检索方案的新设计

doi:10.11959/j.issn.1000-436x.2015028

通信学报 ›› 2015, Vol. 36 ›› Issue (2): 29-37.doi: 10.11959/j.issn.1000-436x.2015028

云环境下安全密文区间检索方案的新设计

王少辉^1,^2,³,韩志杰^1,^2,⁴,陈丹伟^1,²,王汝传^1,²

¹ 南京邮电大学计算机学院，江苏南京 210003
² 江苏省无线传感网高技术研究重点实验室，江苏南京 210003
³ 网络与数据安全四川省重点实验室，四川成都 610054
⁴ 河南大学计算机与信息工程学院，河南郑州 475004

出版日期:2015-02-25 发布日期:2017-06-27
基金资助:
国家自然科学基金资助项目;国家自然科学基金资助项目;江苏省自然科学基金资助项目;江苏省科技支撑计划基金资助项目

New construction of secure range query on encrypted data in cloud computing

Shao-hui WANG^1,^2,³,Zhi-jie HAN^1,^2,⁴,Dan-wei CHEN^1,²,Ru-chuan WANG^1,²

¹ College of Computer,Nanjing University of Posts and Telecommunications,Nanjing 210003,China
² Jiangsu High Technology Research Key Laboratory for Wireless Sensor Networks,Nanjing 210003,China
³ Network and Data Security Key Laboratory of Sichuan Province,Chengdu 610054,China
⁴ School of Computer and Information Engineering,Henan University,Zhengzhou 475004,China

Online:2015-02-25 Published:2017-06-27
Supported by:
The National Natural Science Foundation of China;The National Natural Science Foundation of China;The Natural Science Foundation of Jiangsu Province;S＆T Supporting Project of Jiangsu Province

摘要/Abstract

摘要：

针对目前密文区间检索多次断言存在信息泄露等问题，有单断言的密文区间检索方案(SRQSAE 方案)，并证明方案在唯密文攻击下的隐私安全性。对SRQSAE方案的安全性进行了分析，分析结果表明SRQSAE方案并不能隐藏搜索关键字的大小关系排序。通过在每次生成搜索索引或陷门消息时引入不同随机数的方法，提出了单断言的密文区间检索新方案。新方案对搜索关键字、区间的大小关系提供了很好的隐私保护；而且新方案在安全性提高的同时，并不以损失效率为代价。

关键词: 云存储, 区间检索, 密文检索, 隐私性, 区间陷门

Abstract:

To solve the information leakage problem resulting from several assertions of previous range query solutions,there is a secure range query scheme with one assertion (SRQSAE scheme),and the scheme is claimed to be secure against ciphertext-only attack.The security analysis on SRQSAE scheme is presented,and it shows SRQSAE scheme can not hide the size of search keyword.A new scheme of secure range query on encrypted data is proposed through introducing random numbers in the generation of search index and trapdoor.The new scheme can provide the privacy guarantee on search range and search keyword,and it achieves high level needs of security without losing efficiency.

Key words: cloud storage, range query, search on encrypted data, privacy; interval trapdoor

王少辉,韩志杰,陈丹伟,王汝传. 云环境下安全密文区间检索方案的新设计[J]. 通信学报, 2015, 36(2): 29-37.

Shao-hui WANG,Zhi-jie HAN,Dan-wei CHEN,Ru-chuan WANG. New construction of secure range query on encrypted data in cloud computing[J]. Journal on Communications, 2015, 36(2): 29-37.

图/表 5

参考文献 18

1	GOLDREICH O , OSTROVSKY R . Software protection and simulation on oblivious RAMs[J]. Journal of the ACM, 1996,43(3):431-473.
2	SONG D , WAGNER D , PERRIG A . Practical techniques for searching on encrypted data[A]. SSP 2000,Proceedings of the 2000 IEEE Symposium on Security and Privacy[C]. Seattle,USA, 2006.44-55.
3	GOH E J . Secure indexes[EB/OL]. .
4	CHANG Y , MITZENMACHER M . Privacy preserving keyword searches on remote encrypted data[A]. ACNS’05,Proceedings of Applied Cryptography and Network Security,LNCS 3531[C]. Berlin,Germany, 2005.445-455.
5	CURTMOLA R , GARAY J , KAMARA S . OSTROVSKY R.Searchable symmetric encryption:improved definitions and efficient constructions[A]. CCS 2006,Proceedings of ACM Conference on Computer and Communications Security[C]. New York,USA, 2006.79-88.
6	LIESDONK P , SEDGHI S , DOUMEN J , HARTEL P H , JONKER W . Computationally efficient searchable symmetric encryption[A]. SDM 2010,Proceedings of Workshop on Secure Data Management,LNCS 6358[C]. Berlin,Germany, 2010.87-100.
7	KUROSAWA K , OHTAKI Y . UC-secure searchable symmetric encryption[A]. FC 2012,Proceedings of Financial Cryptography and Data Security,LNCS 7397[C]. Berlin,Germany, 2012.285-298.
8	BONEH D , CRESCENZO G D , OSTROVSKY R , PERSIANO G . Public key encryption with keyword search[A]. Advances in Cryptology:EUROCRYPT 2004,LNCS 3027[C]. Berlin,Germany, 2004.506-522.
9	ABDALLA M , BELLARE M , CATALANO D , et al. Searchable encryption revisited:consistency properties,relation to anonymous IBE,and extensions[J]. Journal of Cryptology, 2008,21(3):350-391.
10	BELLARE M , BOLDYREVA A , O’NEIL A . Deterministic and efficiently searchable encryption[A]. Advances in Cryptology:CRYPTO 2007,LNCS 4622[C]. Berlin,Germany, 2007.535-552.
11	CAMENISCH J , KOHLWEISS M , RIAL A , et al. Blind and anonymous identity-based encryption and authorized private searches on public-key encrypted data[A]. PKC’09,Proceedings of Public Key Cryptography,LNCS 5443[C]. Berlin,Germany, 2009.196-214.
12	BONEH D , SAHAI A , WATERS B . Functional encryption:Definitions and challenges[A]. TCC 2011,Proceedings of Theory of Cryptography,LNCS 6597[C]. Berlin,Germany, 2011.253-273.
13	SHI E , BETHENCOURT J , CHAN T , et al. Multi-dimensional range query over encrypted data[A]. SP 2007,Proceedings of the IEEE Symposium on Security and Privacy[C]. Seattle,USA, 2007.350-364.
14	AGRAWAL R , KIERNAN J , SRIKANT R , et al. Order preserving encryption for numeric data[A]. SIGMOD 2004,Proceedings of ACM SIGMOD Conference[C]. New York,USA, 2004.563-574.
15	BOLDYREVA A , CHENETTE N , LEE Y , et al. Order preserving symmetric encryption[A]. Advances in Cryptology:EUROCRYPT 2009,LNCS 5479[C]. Berlin,Germany, 2009.224-241.
16	HACIGUMUS H , IYER B , LI C , et al. Executing SQL over encrypted data in the database-service-provider model[A]. SIGMOD 2002,Proceedings of ACM SIGMOD Conference on Management of Data[C]. New York,USA, 2002.216-227.
17	HORE B , MEHROTRA S , TSUDIK G . A privacy-preserving index for range queries[A]. CLDB 2004,Proceedings of Very Large Databases Conference[C]. Seattle,USA, 2004.720-731.
18	蔡克, 张敏, 冯登国 . 基于单断言的安全的密文区间检索[J]. 计算机学报, 2011,34(11):2093-2103. CAI K , ZHANG M , FENG D G . Secure range query with single assertion on encrypted data[J]. Chinese Journal of Computers, 2011,34(11):2093-2103.

性能	实体	新方案	SRQSAE方案
	AU	12	4
存储	CSS	4n	2n
传输量	AU	9	5
	AU	PRG + 24M + 16A	8M + 4A
运算量	CSS	9M + 6A	5M + 2A

[1]	哈冠雄, 贾巧雯, 陈杭, 贾春福. 无第三方服务器的基于数据流行度的加密去重方案[J]. 通信学报, 2022, 43(8): 17-29.
[2]	向夏雨, 王佳慧, 王子睿, 段少明, 潘鹤中, 庄荣飞, 韩培义, 刘川意. 基于生成对抗网络技术的医疗仿真数据生成方法[J]. 通信学报, 2022, 43(3): 211-224.
[3]	冯涛, 孔繁琪, 柳春岩, 马蓉, Maher Albettar. 基于区块链的双重可验证云存储方案[J]. 通信学报, 2021, 42(12): 192-201.
[4]	贾春福, 哈冠雄, 武少强, 陈杭, 李瑞琪. 加密去重场景下基于AONT和NTRU的密钥更新方案[J]. 通信学报, 2021, 42(10): 67-80.
[5]	田有亮,骆琴. 基于改进Merkle-Tree认证方法的可验证多关键词搜索方案[J]. 通信学报, 2020, 41(9): 118-129.
[6]	王娜,郑坤,付俊松,李剑. 基于分块的移动边缘计算密文检索方法[J]. 通信学报, 2020, 41(7): 95-102.
[7]	田俊峰,王彦骉,何欣枫,张俊涛,杨万贺,庞亚南. 数据因果一致性研究综述[J]. 通信学报, 2020, 41(3): 154-167.
[8]	柯文龙,王勇,叶苗,陈俊奇. Ceph云存储网络中一种业务优先级区分的多播流调度方法[J]. 通信学报, 2020, 41(11): 40-51.
[9]	孙磊,赵志远,王建华,朱智强. 云存储环境下支持属性撤销的属性基加密方案[J]. 通信学报, 2019, 40(5): 47-56.
[10]	张襄松,李晨,刘振华. 抗密钥泄露的支持密态数据去重的完整性审计方案[J]. 通信学报, 2019, 40(4): 95-106.
[11]	田苗苗,高闯,陈洁. 格上基于身份的云存储完整性检测方案[J]. 通信学报, 2019, 40(4): 128-139.
[12]	田俊峰,柴梦佳,齐鎏岭. 基于公有验证和私有验证的数据持有性验证方案[J]. 通信学报, 2019, 40(3): 48-59.
[13]	杜瑞忠,石朋亮,何欣枫. 基于覆写验证的云数据确定性删除方案[J]. 通信学报, 2019, 40(1): 130-140.
[14]	王祥宇,马建峰,苗银宾,张凯,伍祈应. 基于密钥状态散列树的密钥存储管理方案[J]. 通信学报, 2018, 39(5): 94-102.
[15]	严新成,陈越,贾洪勇,陈彦如,张馨月. 支持高效密文密钥同步演化的安全数据共享方案[J]. 通信学报, 2018, 39(5): 123-133.

云环境下安全密文区间检索方案的新设计

New construction of secure range query on encrypted data in cloud computing

在线阅读

PDF下载

可视化

被引次数

摘要/Abstract

引用本文

使用本文

图/表 5

参考文献 18

相关文章 15

Metrics

推荐阅读 0