分级管理权限匿名多用户云加密搜索方案

Anonymous Multi-user Searchable Encryption Scheme with Hierarchial Permission Management

针对目前云计算环境下多用户加密搜索方案存在的问题,首先提出了一个基本的多用户加密搜索方案,然后将这个基本方案延伸为匿名的分级管理权限的多用户加密搜索方案。与已有的大多数方案相比,该方案不仅实现了对关键字信息的保护,也实现了对用户身份隐私的保护;同时数据拥有者可以直接控制用户查询权限,而不是云端服务器。此外,通过采用一种特殊的查询密钥生成规则,实现了分级管理用户的查询权限。安全分析表明该方案是安全的,同时性能分析及实验数据表明该方案是实际可行的。

To deal with the existing problems of multi-user searchable encryption schemes in the cloud computing,we firstly proposed a basic multi-user searchable encryption scheme,and then extended this basic scheme to a multi-user searchable encryption scheme with anonymous hierarchical permission management.Compared with existing schemes,our scheme not only achieves privacy preserving in both of the searching content and users＇ identities,but also allows the data owner to directly control the dynamic updating of query permission.Additionally,our scheme realizes the hierarchical users＇ query permission management by adopting a specific query key generation rule.The security of our scheme was illustrated by security analysis.Performance evaluation and experimental result show that our scheme is practical and feasible.