Privacy Preserving and Serverless Homomorphic-Based Searchable Encryption as a Service (SEaaS)
Privacy Preserving and Serverless Homomorphic-Based Searchable Encryption as a Service (SEaaS)
复制标题
DOI：
10.1109/access.2023.3324817
复制
发表时间：
2023
期刊：
影响因子：
3.9
通讯作者：
Musfirah Ihtesham;Shahzaib Tahir;Hasan Tahir;Anum Hasan;Aiman Sultan;Saqib Saeed;Omer Rana
中科院分区：
文献类型：
--
作者：
Musfirah Ihtesham;Shahzaib Tahir;Hasan Tahir;Anum Hasan;Aiman Sultan;Saqib Saeed;Omer Rana
无服务器计算由于其适应性，弹性和部署敏捷性而快速增长，受到云提供商和用户的欢迎。然而，这种无服务器采用的激增促使人们重新评估安全问题，因此，可搜索加密已成为一项关键技术。本文探讨了可搜索加密即服务（SEaaS），并在无服务器云环境中介绍了一种创新的隐私保护多关键字可搜索加密（MKSE）方案，以解决以前未满足的安全目标。该方案采用概率加密，并利用全同态加密，使密文的操作，方便搜索加密数据。其核心创新在于使用概率加密进行私人多关键字搜索。为了验证其实用性，我们将该方案部署在公共云基础设施“Contabo”上，并在真实数据集上进行严格的测试。结果表明，我们的新方案成功地保护隐私的搜索查询和访问模式，实现强大的安全性。这项研究有助于无服务器云安全领域，特别是在可搜索加密的背景下，通过提供一种改进的解决方案来保护数据，同时保持无服务器计算环境中的可用性。
Serverless computing has seen rapid growth, thanks to its adaptability, elasticity, and deployment agility, embraced by both cloud providers and users. However, this surge in serverless adoption has prompted a reevaluation of security concerns and thus, searchable encryption has emerged as a crucial technology. This paper explores the Searchable Encryption as a Service (SEaaS) and introduces an innovative privacy-preserving Multiple Keyword Searchable Encryption (MKSE) scheme within a serverless cloud environment, addressing previously unmet security goals. The proposed scheme employs probabilistic encryption and leverages fully homomorphic encryption to enable operations on ciphertext, facilitating searches on encrypted data. Its core innovation lies in the use of probabilistic encryption for private multi-keyword searches. To validate its practicality, we deploy the scheme on the public cloud infrastructure, “Contabo,” and conduct rigorous testing on a real-world dataset. The results demonstrate that our novel scheme successfully preserves the privacy of search queries and access patterns, achieving robust security. This research contributes to the field of serverless cloud security, particularly in the context of searchable encryption, by providing a refined solution for safeguarding data while maintaining usability in a serverless computing landscape.