Practical Attribute-Based Conjunctive Keyword Search Scheme
Practical Attribute-Based Conjunctive Keyword Search Scheme
复制标题
DOI：
10.1093/comjnl/bxz140
复制
发表时间：
2019-12
期刊：
影响因子：
--
通讯作者：
Yang Chen;Wenmin Li;F. Gao;K. Liang;Hua Zhang;Q. Wen
中科院分区：
文献类型：
--
作者：
Yang Chen;Wenmin Li;F. Gao;K. Liang;Hua Zhang;Q. Wen
迄今为止，云计算可以为基于云的应用提供相当大的存储和计算能力以支持密码操作。基于属性的关键字搜索（ABKS）能够在云环境中实现，以保护数据所有者/用户的搜索隐私。ABKS是一种密码原语，它既能为用户提供安全的搜索服务，又能实现对数据的细粒度访问控制。然而，有两个潜在的问题，防止ABKS应用程序的可伸缩性。首先，大多数现有的ABKS方案遭受外部关键字猜测攻击（KGA）。第二，在支持多关键词搜索的同时，还应考虑匹配隐私。在本文中，我们设计了一种有效的方法，联合收割机关键字搜索过程中的ABKS与内积加密和部署几个建议的技术，以确保检索模式的灵活性，我们的方案的安全性和效率。针对上述问题，本文提出了一种基于属性的结合关键词搜索方案。我们提供了两种类型的对手的安全概念，我们的建设被证明是安全的，对选择关键字攻击和外部KGA。最后，利用真实数据集对该方案进行了全方位仿真，仿真结果表明，该方案在不增加存储和计算开销的情况下，具有更强的安全性.
To date cloud computing may provide considerable storage and computational power for cloud-based applications to support cryptographic operations. Due to this benefit, attribute-based keyword search (ABKS) is able to be implemented in cloud context in order to protect the search privacy of data owner/user. ABKS is a cryptographic primitive that can provide secure search services for users but also realize fine-grained access control over data. However, there have been two potential problems that prevent the scalability of ABKS applications. First of all, most of the existing ABKS schemes suffer from the outside keyword guessing attack (KGA). Second, match privacy should be considered while supporting multi-keyword search. In this paper, we design an efficient method to combine the keyword search process in ABKS with inner product encryption and deploy several proposed techniques to ensure the flexibility of retrieval mode, the security and efficiency of our scheme. We later put forward an attribute-based conjunctive keyword search scheme against outside KGA to solve the aforementioned problems. We provide security notions for two types of adversaries and our construction is proved secure against chosen keyword attack and outside KGA. Finally, all-side simulation with real-world data set is implemented for the proposed scheme, and the results of the simulation show that our scheme achieves stronger security without yielding significant cost of storage and computation.