基于身份的具有否认认证的关键字可搜索加密方案

Identity-based Public Key Keyword Searchable Encryption Scheme with Denial Authentication

云存储技术的发展实现了资源共享,为用户节省了数据管理开销。可搜索加密技术,既保护用户隐私又支持密文检索,方便了用户查找云端密文数据。现有的公钥关键字可搜索加密方案虽然支持身份认证,但未实现否认的属性。为了更好地保护发送者的身份隐私,该文将否认认证与公钥关键字可搜索加密技术相结合,提出一种基于身份的具有否认认证的关键字可搜索加密方案(IDAPKSE)。在该方案中,发送者上传密文后,能够对自己上传密文这一通信行为进行否认,与此同时,接收者可以确认密文数据的来源,但是,即使与第三方合作,接收者也不能向第三方证明其所掌握的事实。在随机预言模型下,基于双线性Diffie-Hellman(BDH)和决策双线性Diffie-Hellman(DBDH)数学困难问题,证明了该文方案满足不可伪造性、密文和陷门的不可区分性。

The development of cloud storage technology achieves resource sharing,which reduces users data management overhead.Searchable encryption technology protects users privacy and supports ciphertext retrieval,making it easy for users to find encrypted data in the cloud.Although existing public key searchable encryption schemes support authentication,the denial property is not implemented.To protect better the senders identity privacy,an Identity-based Public Key keyword Searchable Encryption scheme with Denial Authentication(IDAPKSE)is proposed.In the proposed scheme,the sender uploads the ciphertext and has the ability to deny that he or she uploaded the ciphertext to the cloud server.At the same time,the receiver can confirm the origin of the ciphertext,however,even with the cooperation of a third party,the receiver can not prove the facts in his/her possession to the third party.Under the random oracle model,based on the Bilinear Diffie-Hellman(BDH)and Decisional Bilinear Diffie-Hellman(DBDH)assumptions,the proposed scheme satisfies unforgeability of the ciphertexts,and indistinguishability of ciphertexts and trapdoors.