基于改进Merkle-Tree认证方法的可验证多关键词搜索方案

doi:10.11959/j.issn.1000-436x.2020146

Abstract

Abstract:

Aiming at the problem that the result verification method in the searchable encryption scheme was complicated,the search cost was high and the efficiency was low,it was difficult to meet the requirements of efficient verification and security of multi-keyword search results,a multi-keyword search scheme based on the improved Merkle-Tree authentication method was proposed.Firstly,a multi-keyword searchable algorithm was built to achieve efficient and accurate multi-keyword search by the bilinear mapping.Secondly,based on the improved Merkle-Tree authentication method of Bawa,the verification and dynamic update algorithm of the search scheme was constructed to reduce the calculation cost of the classic MHT to prevent the efficient verification and update of illegal operations such as data tampering,deletion,and forgery.Under the decision-type linear hypothesis and CDH hypothesis,the proof scheme meets the indistinguishability and unforgeability of ciphertext.

Key words: cloud computing, search privacy, valid verification, dynamic update

CLC Number:

TP309

Youliang TIAN,Qin LUO. Verifiable multi-keyword search scheme based on improved Merkle-Tree authentication method[J]. Journal on Communications, 2020, 41(9): 118-129.

Figures/Tables 10

References 25

[1]	MELL P , GRANCE T . The NIST definition of cloud computing[J]. National Institute of Standards and Technology, 2009,53(6): 50-53.
[2]	ARMBRUST M , FOX A , GRIFFITH R ,et al. A view of cloud computing[J]. Communications of the ACM, 2010,53(4): 50-58.
[3]	SAHAI A , WATERS B . Fuzzy identity-based encryption[C]// Annual International Conference on the Theory and Applications of Cryptographic Techniques. Berlin:Springer, 2005: 457-473.
[4]	SONG D X , WAGNER D , PERRIG A . Practical techniques for searches on encrypted data[C]// Proceeding 2000 IEEE Symposium on Security and Privacy. Piscataway:IEEE Press, 2000: 44-55.
[5]	GOH E J . Secure indexes[J]. IACR Cryptology ePrint Archive, 2003,6(12): 12-22.
[6]	CHANG Y C , MITZENMACHER M . Privacy preserving keyword searches on remote encrypted data[C]// Applied Cryptography and Network Security. Berlin:Springer, 2005: 442-455.
[7]	CURTMOLA R , GARAY J A , KAMARA S ,et al. Searchable symmetric encryption:improved definitions and efficient constructions[C]// ACM Conference Computer and Communication Security.New York:ACM Press. 2006: 376-379.
[8]	GOLLE P , STADDON J , WATERS B . Secure conjunctive keyword search over encrypted data[C]// International Conference on Applied Cryptography and Network Security. Berlin:Springer, 2004: 31-45.
[9]	ZHENG Q , LI X , AZGIN A . CLKS:certificateless keyword search on encrypted data[C]// International Conference on Network and System Security. Berlin:Springer, 2015: 239-253.
[10]	ZHANG W , LIN Y , XIAO S ,et al. Privacy preserving ranked multi-keyword search for multiple data owners in cloud computing[J]. IEEE Transactions on Computers, 2015,65(5): 1566-1577.
[11]	YANG Y , MA M . Conjunctive keyword search with designated tester and timing enabled proxy re-encryption function for e-health clouds[J]. IEEE Transactions on Information Forensics and Security, 2015,11(4): 746-759.
[12]	SHEN J , SHEN J , CHEN X ,et al. An efficient public auditing protocol with novel dynamic structure for cloud data[J]. IEEE Transactions on Information Forensics and Security, 2017,12(10): 2402-2415.
[13]	SUN W , WANG B , CAO N ,et al. Verifiable privacy-preserving multi-keyword text search in the cloud supporting similarity-based ranking[J]. IEEE Transactions on Parallel and Distributed Systems, 2013,25(11): 3025-3035.
[14]	WANG J , CHEN X , HUANG X ,et al. Verifiable auditing for outsourced database in cloud computing[J]. IEEE Transactions on Computers, 2015,64(11): 3293-3303.
[15]	CHUM C S , ZHANG X . A new bloom filter structure for searchable encryption schemes[C]// Proceedings of the Seventh ACM on Conference on Data and Application Security and Privacy. New York:ACM Press, 2017: 143-145.
[16]	MIAO Y , WENG J , LIU X ,et al. Enabling verifiable multiple keywords search over encrypted cloud data[J]. Information Sciences, 2018,465(10): 21-37.
[17]	BONEH D , CRESCENZO G D , OSTROVSKY R ,et al. Public key encryption with keyword search[C]// International Conference on the Theory and Applications of Cryptographic Techniques. Berlin:Springer, 2004: 506-522.
[18]	GUO Y , LI J , ZHANG Y ,et al. Hierarchical attribute-based encryption with continuous auxiliary inputs leakage[J]. Security ＆ Communication Networks, 2016,9(18): 4852-4862.
[19]	MIAO Y , MA J , LIU X ,et al. Practical attribute-based multi-keyword search scheme in mobile crowdsourcing[J]. IEEE Internet of Things Journal, 2017,5(4): 3008-3018.
[20]	KUROSAWA K , OHTAKI Y . How to update documents verifiably in searchable symmetric encryption[C]// International Conference on Cryptology and Network Security. Berlin:Springer, 2013: 309-328.
[21]	KUROSAWA K , . Garbled searchable symmetric encryption[C]// International Conference on Financial Cryptography and Data Security. Berlin:Springer, 2014: 234-251.
[22]	GARG N , BAWA S . RITS-MHT:relative indexed and time stamped Merkle Hash tree based data auditing protocol for cloud computing[J]. Journal of Network and Computer Applications, 2017,84: 1-13.
[23]	杨波 . 密码学中的可证明安全性[M]. 北京: 清华大学出版社, 2017.
	YANG B . Provable security in cryptography[M]. Beijing: Tsinghua University PressPress, 2017.
[24]	ZHENG Q , LI X , AZGIN A . CLKS:certificateless keyword search on encrypted data[C]// International Conference on Network and System Security. Berlin:Springer, 2015: 239-253.
[25]	MIAO Y , MA J , LIU X ,et al. VMKDO:verifiable multi-keyword search over encrypted cloud data for dynamic data-owner[J]. Peer-to-peer Networking and Applications, 2018,11(2): 287-297.

Metrics

Recommended 0

No Suggested Reading articles found!

符号	含义
\|u\|	数据用户的大小
E	幂指数操作
n	数据块的大小
m	每条记录的关键词字段的大小
P	配对操作
l	关键词数量
d	搜索结果的数量

方案	KeyGen	Enc	Trap	Search	Verify
文献[9]方案	2\|u\|E	(8+m)E	(9+l)E	lP+ 3P	—
文献[16]方案	2\|u\|E+ E2	(10+m)E+H_o	10E	lP+ 3P	lP+ 3P
文献[25]方案	(\|DO\|+1)E	(m+5+2n)E+nH ₁+3P	2E	2P+3E	(d+1)E+dH ₁+2P
本文方案	\|n\|E+ E3	10 E+nE	(9+l)E	4P	nE+ P 4

方案	数据保密性	可验证查询完整性	支持多关键词搜索	搜索隐私性	支持动态更新
文献[9]方案	是	否	是	是	否
文献[16]方案	是	是	是	是	否
文献[25]方案	是	是	是	是	是
本文方案	是	是	是	是	是

Verifiable multi-keyword search scheme based on improved Merkle-Tree authentication method

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 10

References 25

Related Articles 15

Metrics

Recommended 0

[1]	Ling MA, Qiliang FAN, Ting XU, Guanchen GUO, Shenglin ZHANG, Yongqian SUN, Yuzhi ZHANG. Scheduling framework based on reinforcement learning in online-offline colocated cloud environment [J]. Journal on Communications, 2023, 44(6): 90-102.
[2]	Huaqun WANG, Zhe LIU, Debiao HE, Jiguo LI. Identity-based provable data possession scheme for multi-source IoT terminal data in public cloud [J]. Journal on Communications, 2021, 42(7): 52-60.
[3]	Jianhong ZHANG, Menglong WU, Jing WANG, Pei LIU, Zhengtao JIANG, Changgen PENG. Secure and verifiable multi-keyword searchable encryption scheme in cloud [J]. Journal on Communications, 2021, 42(4): 139-149.
[4]	Ruiqi LI, Chunfu JIA, Yafei WANG. Multi-key homomorphic proxy re-encryption scheme based on NTRU and its application [J]. Journal on Communications, 2021, 42(3): 11-22.
[5]	Jiawei ZHANG, Jianfeng MA, Zhuo MA, Teng LI. Time-based and privacy protection revocable and traceable data sharing scheme in cloud computing [J]. Journal on Communications, 2021, 42(10): 81-94.
[6]	Wenjuan WANG, Xuehui DU, Dibin SHAN. Construction method of attack scenario in cloud environment based on dynamic probabilistic attack graph [J]. Journal on Communications, 2021, 42(1): 1-17.
[7]	Na WANG,Kun ZHENG,Junsong FU,Jian LI. Method of ciphertext retrieval in mobile edge computing based on block segmentation [J]. Journal on Communications, 2020, 41(7): 95-102.
[8]	Lindong ZHAO,Wenqin ZHUANG,Jianxin CHEN,Liang ZHOU. Hierarchical task offloading in heterogeneous cellular network:modeling and optimization [J]. Journal on Communications, 2020, 41(4): 34-44.
[9]	Bing LIANG,Wen JI. Multiuser computation offloading for edge-cloud collaboration using submodular optimization [J]. Journal on Communications, 2020, 41(10): 25-36.
[10]	SU Mingfeng,WANG Guojun,LI Renfa. Multidimensional QoS cloud computing resource scheduling method based on stakeholder perspective [J]. Journal on Communications, 2019, 40(6): 102-115.
[11]	CHEN Xingshu,HUA Qiang,WANG Yitong,GE Long,ZHU Yi. Research on low-rate DDoS attack of SDN network in cloud environment [J]. Journal on Communications, 2019, 40(6): 210-222.
[12]	Wanliang WANG, Zelin ZANG, Guoqi CHEN, Hangyao TU, Yule WANG, Linyan LU. Research on optimal two element exchange algorithm for large scale cloud computing server scheduling problem [J]. Journal on Communications, 2019, 40(5): 180-191.
[13]	Tian WANG,Xuewei SHEN,Hao LUO,Baisheng CHEN,Guojun WANG,Weijia JIA. Research progress of trusted sensor-cloud based on fog computing [J]. Journal on Communications, 2019, 40(3): 170-181.
[14]	Xinfeng HE,Junfeng TIAN,Fanming LIU. Survey on trusted cloud platform technology [J]. Journal on Communications, 2019, 40(2): 154-163.
[15]	Zhiqiang ZHU,Renhao LIN,Cuiyun HU. Openstack authentication protocol based on digital certificate [J]. Journal on Communications, 2019, 40(2): 188-196.