Forward-Private Dynamic Searchable Symmetric Encryption with Efficient Search
Forward-Private Dynamic Searchable Symmetric Encryption with Efficient Search
复制标题
DOI：
10.1109/icc.2018.8422480
复制
发表时间：
2018-05
期刊：
影响因子：
--
通讯作者：
Muslum Ozgur Ozmen;Thang Hoang;A. Yavuz
中科院分区：
文献类型：
--
作者：
Muslum Ozgur Ozmen;Thang Hoang;A. Yavuz
动态可搜索对称加密（DSSE）允许通过加密索引在加密数据库上委托关键字搜索和文件更新，因此提供了缓解云存储平台中数据隐私和利用困境的机会。尽管它的优点，最近的工作表明，有效的DSSE计划是容易受到统计攻击，由于缺乏前向隐私，而前向隐私DSSE计划遭受实用性的问题，由于其极端的计算开销。由于统计攻击的重大实际影响，有一个新的DSSE计划，可以实现前向隐私在一个更实际和有效的方式是一个关键的需求。我们提出了一个新的DSSE计划，我们称之为前向私有次线性DSSE（FS-DSSE）。FS-DSSE利用特殊的安全更新策略和一种新的缓存策略来减少重复查询的计算开销。因此，它同时实现了前向隐私，次线性搜索复杂度，低端到端延迟和并行化能力。我们完全实现了我们提出的方法，并评估其性能上的真实的云平台。我们的实验评估结果表明，所提出的方案是高度安全和高效相比，最先进的DSSE技术。具体来说，FS-DSSE比前向安全DSSE快三倍，这取决于数据库中搜索关键字的频率。
Dynamic Searchable Symmetric Encryption (DSSE) allows to delegate keyword search and file update over an encrypted database via encrypted indexes, and therefore provides opportunities to mitigate the data privacy and utilization dilemma in cloud storage platforms. Despite its merits, recent works have shown that efficient DSSE schemes are vulnerable to statistical attacks due to the lack of forward-privacy, whereas forward-private DSSE schemes suffers from practicality concerns as a result of their extreme computation overhead. Due to significant practical impacts of statistical attacks, there is a critical need for new DSSE schemes that can achieve the forward-privacy in a more practical and efficient manner. We propose a new DSSE scheme that we refer to as Forward-private Sublinear DSSE (FS-DSSE). FS-DSSE harnesses special secure update strategies and a novel caching strategy to reduce the computation cost of repeated queries. Therefore, it achieves forward-privacy, sublinear search complexity, low end-to-end delay, and parallelization capability simultaneously. We fully implemented our proposed method and evaluated its performance on a real cloud platform. Our experimental evaluation results showed that the proposed scheme is highly secure and highly efficient compared with state-of-the-art DSSE techniques. Specifically, FS-DSSE is up to three magnitude of times faster than forward-secure DSSE counterparts, depending on the frequency of the searched keyword in the database.