基于区块链且支持验证的属性基搜索加密方案

doi:10.11959/j.issn.1000-436x.2020011

Abstract

Abstract:

For the problem that the shared decryption key lacks of fine-grained access control and the search results lacks of correctness verification under one-to-many search model,a verifiable attribute-based searchable encryption scheme based on blockchain was proposed.The ciphertext policy attribute-based encryption mechanism was used on the shared key to achieve fine-grained access control.Ethereum blockchain technology was combined to solve the problem of incorrect search results returned by the semi-honest and curious cloud server model,so it could prompt both the cloud server and the user to follow the rules of the contract honestly and achieved service-payment fairness between the user and the cloud server in the pay-per-use cloud environment.In addition,based on the irreversible modification of the blockchain,the cloud server was guaranteed to receive the service fee,and the user was assured to obtain the correct retrieval results without additional verification which reduced the computational overhead of the user.The security analysis shows that the scheme satisfies the semantic security against adaptive chosen keyword attack and can protect the privacy of users and the security of data.The performance comparison and experimental results show that the scheme has certain optimizations in security index generation,search token generation,retrieval efficiency and transaction quantity,so it is more suitable for one-to-many search scenarios such as smart medical.

Key words: symmetric searchable encryption, attribute-based encryption, ethereum smart contract, verifiable

CLC Number:

TP309

Xixi YAN,Xiaohan YUAN,Yongli TANG,Yanli CHEN. Verifiable attribute-based searchable encryption scheme based on blockchain[J]. Journal on Communications, 2020, 41(2): 187-198.

Figures/Tables 8

变量	描述
owner	地址类型，合约创建者DO地址
Index	映射类型，由键值对组成，通过给定键找到相应值，本文中索引包含 m 个条目，键值对一一对应，键为 $T_{w_{i}}$ ，值为 $C_{K_{1}} \| \| DB (w_{i})$ \| 。其中，键是唯一的
result	整数类型，存储搜索结果
miner	地址类型，当前区块的矿工地址

函数	描述
searchTest()	构造函数，无参函数，进行初始化操作，判断合约部署者是否是数据拥有者DO
addIndex()	添加索引函数，输入安全索引，数据拥有者DO调用该函数，用在智能合约中存储安全索引
search()	搜索函数，数据使用者 DU 调用该函数并传入搜索令牌T_kw，输出搜索结果 $C_{K_{1}}$ 和DB(kw)存储在result中

变量	描述
key	整数类型，存储验证密钥K₂
contract	地址类型，合约地址
Mac_kw	数组类型，存放包含查询关键词的消息验证码集合 ${MAC}_{kw} = {{MAC}_{C_{1}}, {MAC}_{C_{2}}, \cdot \cdot \cdot, {MAC}_{C_{j}}}$
cipher	数组类型，存放密文文档 $C_{kw} = {C_{1}, C_{2}, \cdot \cdot \cdot, C_{j}}$

函数	描述
verifyTest()	构造函数，无参函数，进行初始化操作，判断合约部署者是否是数据使用者DU
addMac()	添加消息验证码函数，数据使用者DU调用该函数用于存储MAC_kw和验证密钥K₂
verify()	验证函数，云服务器 CSP 调用该函数并传入参数C_kw ，验证合约验证结果的正确性和完整性： $H_{2} (K_{2}, C_{i}) = = {MAC}_{C_{i}}$ ，其中1≤i≤j，当验证不通过时，表明云服务器返回的结果不正确，云服务器受到惩罚，将$Guranty和$serFee支付给DU；当验证通过时，DU得到正确结果，CSP获得应收的服务费，将$Guranty和$serFee支付给 CSP。通过智能合约，使用户支付了手续费就一定能得到正确的搜索结果，云服务器提供了正确的结果就一定可以获得服务费，同时用户不能否认结果而不支付手续费，各方均诚实按照合约的规则执行，很好地解决了不公平的问题，实现服务-支付公平，并且不需要用户本地额外验证

References 15

[1]	SONG D X , WAGNER D , PERRIG A . Practical techniques for searches on encrypted data[C]// 2000 IEEE Symposium on Security and Privacy. Berkeley, 2000: 44-55.
[2]	BETHENCOURT J , SAHAI A , WATERS B . Ciphertext-policy attribute-based encryption[C]// 2007 IEEE Symposium on Security and Privacy,Washington, 2007: 321-334.
[3]	YIN H , ZHANG J , XIONG Y ,et al. CP-ABSE:a ciphertext-policy attribute-based searchable encryption scheme[J]. IEEE Access, 2019,7(99): 5682-5694.
[4]	刘振华, 周佩琳, 段淑红 . 支持关键词搜索的属性代理重加密方案[J]. 电子与信息学报, 2018,40(3): 683-689.
	LIU Z H , ZHOU P L , DUAN S H . Attribute proxy re-encryption scheme supporting keyword search[J]. Journal of Electronics ＆ Information Technology, 2018,40(3): 683-689.
[5]	孙瑾, 王小静, 王尚平 ,等. 支持属性撤销的可验证多关键词搜索加密方案[J]. 电子与信息学报, 2019,41(1): 53-60.
	SUN J , WANG X J , WANG S P ,et al. Verifiable multi-keyword search encryption scheme supporting attribute revocation[J]. Journal of Electronics ＆ Information Technology, 2019,41(1): 53-60.
[6]	CURTMOLA R , GARAY J , KAMARA S ,et al. Searchable symmetric encryption:improved definitions and efficient constructions[C]// The 13th ACM Conference on Computer and Communications Security. Alexandria, 2006: 79-88.
[7]	CHAI Q , GONG G . Verifiable symmetric searchable encryption for semi-honest-but-curious cloud servers[C]// The 2012 IEEE International Conference on Communications. Ottawa, 2012: 917-922.
[8]	JIANG X , YU J , YAN J ,et al. Enabling efficient and verifiable multi-keyword ranked search over encrypted cloud data[J]. Information Sciences, 2017,40(3): 22-41.
[9]	杜瑞忠, 李明月, 田俊峰 ,等. 基于倒排索引的可验证混淆关键字密文检索方案[J]. 软件学报, 2019,30(8): 2362-2374.
	DU R Z , LI M Y , TIAN J F ,et al. A ciphertext retrieval scheme for verifiable confusing keywords based on inverted index[J]. Journal of Software, 2019,30(8): 2362-2374.
[10]	伍祈应, 马建峰, 李辉 ,等. 支持用户撤销的多关键字密文查询方案[J]. 通信学报, 2017,38(8): 183-193.
	WU Q Y , MA J F , LI H ,et al. Multi-keyword ciphertext query scheme supporting user revocation[J]. Journal on Communications, 2017,38(8): 183-193.
[11]	CAI C , WENG J , YUAN X ,et al. Enabling reliable keyword search in encrypted decentralized storage with fairness[J]. IEEE Transactions on Dependable and Secure Computing, 2018,1(99):1.
[12]	ZHANG Y H , DENG R H , SHU J ,et al. TKSE:trustworthy keyword search over encrypted data with two-side verifiability via blockchain[J]. IEEE Access, 2018(6): 31077-31087.
[13]	WANG S P , ZHANG Y L , ZHANG Y L . A blockchain-based framework for data sharing with fine-grained access control in decentralized storage systems[J]. IEEE Access, 2018(6): 38437-38450.
[14]	CHEN L X , LEE W K , CHANG C C ,et al. Blockchain based searchable encryption for electronic health record sharing[J]. Future Generation Computer Systems, 2019,95: 420-429.
[15]	LI H G , TIAN H B , ZHANG F G ,et al. Blockchain-based searchable symmetric encryption scheme[J]. Computers ＆ Electrical Engineering, 2019,73: 32-45.

Metrics

Recommended 0

No Suggested Reading articles found!

方案	关键词类型	基于区块链	细粒度访问控制	访问策略	可信审计机构	结果可验证	公平支付
文献[10]方案	多关键词	×	√	访问树	√	审计机构	×
文献[12]方案	单关键词	√	×	×	×	用户端	√
文献[13]方案	单关键词	√	√	与门	×	—	√
本文方案	单关键词	√	√	访问树	×	智能合约	√

方案	索引生成阶段	搜索令牌生成阶段	搜索阶段	验证阶段	交易数量
文献[10]方案	2(\|U\|+\|m\|+6)E ₀+E₁+\|U\|H	(2\|S\|+\|l\|+4)E ₀	2\|S\|E ₀+E₁+5P	3\|R\|P	—
文献[12]方案	\|m\|\| j\|(F+H+SIG)	\|N\|F	\|N\|(H+SIG)	\|N\|(H+SIG)	13
文献[13]方案	(2I_P+2)M+2E ₀+E₁+2\|m\|F	PK+F	1	—	7
本文方案	M +(2Y+1)E ₀+E₁+\|m\|F	F	1	\|R\|!H	4

Verifiable attribute-based searchable encryption scheme based on blockchain

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 8

References 15

Related Articles 15

Metrics

Recommended 0

[1]	Xuejiao LIU, Tiancong CAO, Yingjie XIA. Research on efficient and secure cross-domain data sharing of IoV under blockchain architecture [J]. Journal on Communications, 2023, 44(3): 186-197.
[2]	Yiliang HAN, Kaiyang GUO, Riming WU, Kai LIU. Attribute-based encryption scheme against key abuse based on OBDD access structure from lattice [J]. Journal on Communications, 2023, 44(1): 75-88.
[3]	Ruizhong DU, Tianhe ZHANG, Pengliang SHI. Ciphertext policy hidden access control scheme based on blockchain and supporting data sharing [J]. Journal on Communications, 2022, 43(6): 168-178.
[4]	Xinchun YIN, Mengyu WANG, Jianting NING. Lightweight searchable medical data sharing scheme [J]. Journal on Communications, 2022, 43(5): 110-122.
[5]	Tao FENG, Fanqi KONG, Chunyan LIU, Rong MA, Albettar Maher. Dual verifiable cloud storage scheme based on blockchain [J]. Journal on Communications, 2021, 42(12): 192-201.
[6]	Xixi YAN,Xu HE,Tao LIU,Qing YE,Jinxia YU,Yongli TANG. Traceable attribute-based encryption scheme with key-delegation abuse resistance [J]. Journal on Communications, 2020, 41(4): 150-161.
[7]	FENG Chaosheng,LUO Wangping,QIN Zhiguang,YUAN Ding,ZOU Liping. Attribute-based proxy re-encryption scheme with multiple features [J]. Journal on Communications, 2019, 40(6): 177-189.
[8]	Lei SUN,Zhiyuan ZHAO,Jianhua WANG,Zhiqiang ZHU. Attribute-based encryption scheme supporting attribute revocation in cloud storage environment [J]. Journal on Communications, 2019, 40(5): 47-56.
[9]	Youliang TIAN,Kedi YANG,Zuan WANG,Tao FENG. Algorithm of blockchain data provenance based on ABE [J]. Journal on Communications, 2019, 40(11): 101-111.
[10]	Yanshuo ZHANG,Wenjing LI,Lei CHEN,Wei BI,Tao YANG. Verifiable special threshold secret sharing scheme based on eigenvalue [J]. Journal on Communications, 2018, 39(8): 169-175.
[11]	Jian LIU,Ming XIAN,Huimei WANG,Hong RONG. Optimization method for attribute-based cryptographic access control in mobile cloud computing [J]. Journal on Communications, 2018, 39(7): 39-49.
[12]	Qi LI,Hongbo ZHU,Jinbo XIONG,Ruo MO. Multi-authority attribute-based access control system in mHealth with traceability [J]. Journal on Communications, 2018, 39(6): 1-10.
[13]	Xin LIU,Qiuliang XU,Bin ZHANG,Bo ZHANG. k-times attribute-based authentication scheme using direct anonymous attestation [J]. Journal on Communications, 2018, 39(12): 113-133.
[14]	Yong-hui ZHENG,Yuan-ji KANG,Chun-xiang GU,Hui DONG. Attribute-based fully homomorphic encryption scheme over rings [J]. Journal on Communications, 2017, 38(4): 55-63.
[15]	Wei-wei ZHANG,Yu-zhao ZHANG,Chao HUANG,Ru ZHANG,Yi-xian YANG. Data sharing scheme supporting secure outsourced computation in wireless body area network [J]. Journal on Communications, 2017, 38(4): 64-75.