支持安全共享的云存储系统研究

doi:10.11959/j.issn.1000-436x.2017240

Abstract

Abstract:

A practical scheme for the cloud storage system was proposed to ensure security and efficiency during data sharing.The scheme which combine attribute-based encryption,proxy encryption with symmetric encryption,could integrate access control,efficient search with encryption well together.The scheme archived conjunctive-keyword non-field subset search by using bilinear mapping and polynomial equation.The scheme reduced the cost of decryption by outsourcing most of the decryption operations from the terminal to the cloud.At last,the performance was analyzed and an experiment was made for verification.

Key words: cloud storage, attribute-base encryption, searchable encryption, decryption outsourcing

CLC Number:

TP309.7

Yan SONG,Zhen HAN,Jian-jun LI,Lei HAN. Research on cloud storage systems supporting secure sharing[J]. Journal on Communications, 2017, 38(Z1): 88-96.

Figures/Tables 3

References 14

[1]	傅颖勋, 罗圣美, 舒继武 . 一种云存储环境下的安全网盘系统[J]. 软件学报, 2014,25(8): 1831-1843.
	FU Y X , LUO S M , SHU J W . Secure online storage system based on cloud storage environment[J]. Journal of Software, 2014,25(8): 1831-1843.
[2]	薛矛, 薛巍, 舒继武 ,等. 一种云存储环境下的安全存储系统[J]. 计算机学报, 2015,38(5): 987-998.
	XUE M , XUE W , SHU J W ,et al. A secure storage system over cloud storage environment[J]. Chinese Journal of Computers, 2015,38(5): 987-998.
[3]	SAHAI A , WATERS B . Fuzzy identity-based encryption[C]// Advances in Cryptology (EUROCRYPT 2005),Aarhus,Denmark,2005. Berlin Heidelberg:Springer, 2005: 457-473.
[4]	GOYAL V , PANDEY O , SAHAI A ,et al. Attribute-based encryption for fine-grained access control of encrypted data[C]// The 13th ACM Conference on Computer and Communications Security (CCS’ 06). 2006: 89-98.
[5]	BETHENCOURT J , SAHAI A , WATERS B . Ciphertext-policy attribute-based encryption[C]// The 2007 IEEE Symposium on Security and Privacy (SP’ 07)2007. 2008: 321-334.
[6]	ATTRUPADUNG N , HERRANZ J , LAGUILLAUME F ,et al. Attribute-based encryption schemes with constant-size ciphertexts[J]. Theoretical Computer Science, 2012,422: 15-38.
[7]	GREEN M , HOHENBERGER S , WATERS B . Outsourcing the decryption of ABE ciphertexts[C]// The 20th USENIX conference on security (SEC 2011). 2011: 34-49.
[8]	SONG D , WAGNER D , PERRIG A . Practical techniques for searches on encrypted data[C]// The IEEE Symposium on Security and Privacy(S＆P’00). 2000: 44-55.
[9]	BONEH D , CRESCENZOM G D , OSTROVSKY R ,et al. Public key encryption with keyword search[C]// The International Conference on the Theory and Applications of Cryptographic Techniques (EUROCRYPT 2004). 2004: 506-522.
[10]	LEE C C , HSU S T , H M S . A study of conjunctive keyword searchable schemes[J]. International Journal of Network Security, 2013,15(5): 321-330.
[11]	GOLLE P , STADDON J , WATERS B . Secure conjunctive keyword search over encrypted data[C]// Applied Cryptography and Network Security Conference (ACNS 2004). 2004: 31-45.
[12]	PARK D J , KIM K , and LEE P J . Public key encryption with conjunctive-field keyword search[C]// The 5th Information Security Applications International Workshop (WISA 2004). 2004: 73-86.
[13]	HWANG Y H , LEE P J . Public key encryption with conjunctive keyword search and its extension to a multi-user system[C]// The First International Conference of Pairing-Based Cryptography (Pairing 2007). 2007: 2-22.
[14]	ZHANG B , ZHANG F G . An efficient public key encryption with conjunctive-subset keywords search[J]. Journal of Network and Computer Applications, 2011,34(1): 262-267.

Metrics

Recommended 0

No Suggested Reading articles found!

工作项	使用前运算量	使用后运算量
构造密文的权限（部分）	4vP	2vP
构造对称密钥密文（部分）	2P+M	2P+M
构造关键词密文（部分）	(m+4)P+M	(m+4)P+M
文档加密（总共）	(4v+m+6)P+2M+D	(2v+m+6)P+2M+D
构造凭证的权限（部分）	2uP	2uP
构造凭证的外包解密（部分）
构造凭证的搜索（部分）	(m+3)P	(m+3)P
在线凭证构造（总共）	(2u+m+3)P	(m+4)P
权限验证	2iE+iM
搜索匹配	(m+2)E+(m+2)M	(m+2)E+(m+2)M
外包解密		E+P
云端搜索（总共）	(2i+m+2)E+(i+m+2)M	(m+3)E+(m+4)M
终端解密	2iE+(i+1)M+D	P+M+D

[1]	Tao FENG, Liqiu CHEN, Junli FANG, Jianming SHI. Blockchain data sharing scheme based on localized difference privacy and attribute-based searchable encryption [J]. Journal on Communications, 2023, 44(5): 224-233.
[2]	Guanxiong HA, Qiaowen JIA, Hang CHEN, Chunfu JIA. Data popularity-based encrypted deduplication scheme without third-party servers [J]. Journal on Communications, 2022, 43(8): 17-29.
[3]	Tao FENG, Fanqi KONG, Chunyan LIU, Rong MA, Albettar Maher. Dual verifiable cloud storage scheme based on blockchain [J]. Journal on Communications, 2021, 42(12): 192-201.
[4]	Chunfu JIA, Guanxiong HA, Shaoqiang WU, Hang CHEN, Ruiqi LI. AONT-and-NTRU-based rekeying scheme for encrypted deduplication [J]. Journal on Communications, 2021, 42(10): 67-80.
[5]	Dong ZHENG, Tianze ZHU, Rui GUO. Public key searchable encryption scheme in blockchain-enabled multi-user environment [J]. Journal on Communications, 2021, 42(10): 140-152.
[6]	Shufen NIU,Wenke LIU,Lixia CHEN,Caifen WANG,Xiaoni DU. Electronic medical record data sharing scheme based on searchable encryption via consortium blockchain [J]. Journal on Communications, 2020, 41(8): 204-214.
[7]	Ruizhong DU,Ailun TAN,Junfeng TIAN. Public key searchable encryption scheme based on blockchain [J]. Journal on Communications, 2020, 41(4): 114-122.
[8]	Junfeng TIAN,Yanbiao WANG,Xinfeng HE,Juntao ZHANG,Wanhe YANG,Ya’nan PANG. Survey on the causal consistency of data [J]. Journal on Communications, 2020, 41(3): 154-167.
[9]	Xixi YAN,Xiaohan YUAN,Yongli TANG,Yanli CHEN. Verifiable attribute-based searchable encryption scheme based on blockchain [J]. Journal on Communications, 2020, 41(2): 187-198.
[10]	Wenlong KE,Yong WANG,Miao YE,Junqi CHEN. Priority differentiated multicast flow scheduling method in Ceph cloud storage network [J]. Journal on Communications, 2020, 41(11): 40-51.
[11]	Lei SUN,Zhiyuan ZHAO,Jianhua WANG,Zhiqiang ZHU. Attribute-based encryption scheme supporting attribute revocation in cloud storage environment [J]. Journal on Communications, 2019, 40(5): 47-56.
[12]	Xiangsong ZHANG,Chen LI,Zhenhua LIU. Key-exposure resilient integrity auditing scheme with encrypted data deduplication [J]. Journal on Communications, 2019, 40(4): 95-106.
[13]	Miaomiao TIAN,Chuang GAO,Jie CHEN. Identity-based cloud storage integrity checking from lattices [J]. Journal on Communications, 2019, 40(4): 128-139.
[14]	Junfeng TIAN,Mengjia CHAI,Liuling QI. Provable data possession scheme based on public verification and private verification [J]. Journal on Communications, 2019, 40(3): 48-59.
[15]	Qiang ZHANG,Guojun WANG,Shaobo ZHANG. Method of privacy protection based on multiple edge servers in personalized search [J]. Journal on Communications, 2019, 40(2): 40-50.

Research on cloud storage systems supporting secure sharing

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 3

References 14

Related Articles 15

Metrics

Recommended 0