关于具有安全计算功能的多密钥可搜索加密的研究

随着云计算的发展，云数据安全越来越重要。可搜索加密、外包计算和云存储审计作为云计算三大安全技术，在云数据安全中扮演重要角色，各自在性能上不断突破，但发展相互独立，难以保证云服务器连续或交叉执行与存储、搜索和计算相关操作的安全性。本课题拟将这三项技术作为连续过程展开研究，包括：1.可验证的多密钥可搜索加密的方案框架和安全性，方案的设计与分析，实现仅通过一个口令就可对不同密钥加密的数据进行搜索。2.具有安全计算功能的可搜索加密的方案框架、安全性和可验证性，找出可搜索加密与外包计算相融合得到具有安全计算功能的可搜索加密的条件与方法，实现数据定位和数据处理的可连续使用性。3.支持去重的云存储审计实现数据隐私保护的条件、方案框架和安全性，利用2中结果构造方案，实现对数据的定位、处理和审计。 .本课题旨在为实现云计算三大安全技术的融合尝试新思路，进而为云平台下的存储、搜索与计算一体化提供理论支持。

Cloud data security is gaining increasing importance with the rapid expansion of cloud computing. Searchable encryption, outsourced computation and cloud storage auditing are three main technologies to address the security in cloud computing. However, the developments are independent of each other, which can hardly guarantee the security when the cloud server performs some form of combination regarding storage, search and computation. This project will sequentially research on these three technologies mainly from the following aspects: 1. The general framework and security definitions of verifiable multi-key searchable encryption, and the design and analysis of schemes, with the aim of using just one token to searching the data encrypted by different keys. 2. The formal definition, security and verifiability of the searchable encryption supporting secure computation. The requirement and approach to achieve the functionality of searchable encryption supporting secure computation based on the integration between the searchable encryption and the outsourced computation. And to achieve the succession about the functionality of data locating and data processing. 3. The condition, construction framework and security of the privacy-preserving cloud storage auditing supporting deduplication. The construction to implementation of the data locating, processing and auditing based on the result of process 2..This project tries to explore a new way to integrate the three cloud security technologies, and further provides the theoretic support for the integrated development of storage, search and computation in cloud platform.