一种支持属性撤销的top- k多关键词密文检索方案

Top-k multi-keyword ciphertext retrieval scheme supporting attribute revocation

近年来,云计算的推广使得可搜索加密技术得到极大发展。然而,现有的大部分可搜索加密技术普遍只支持单关键字搜索和遍历密文检索,搜索过程不能根据用户需求进行筛选和检索,不支持属性撤销,会返回大量无关数据以至于影响搜索用户体验。为了解决以上问题,提出一种支持属性撤销的top-k多关键词密文检索方案。在支持多关键字检索的基础上,通过属性基算法的访问策略和语义模型,构建属性-文件集映射的索引表,实现对密文的细粒度访问控制和权限管理,支持top-k排序和高效检索;引入同态加密模糊数据参数,保证加密数据隐私和多用户属性授权,多层数据压缩降低存储开销,能够低计算开销实现属性撤销。通过理论分析表明,该方案具有前后向安全性和关键词隐藏,能够抵抗共谋攻击,并且与同类方案进行功能和实验评估,结果证明该方案在功能和效率方面具有较好的综合性能。

In recent years,the promotion of cloud computing has led to the great development of searchable encryption technology.However,most of the existing searchable encryption technologies generally only support single-keyword search and traversal ciphertext retrieval.The search process cannot be filtered and retrieved according to user needs,and does not support attribute revocation,which will return a large amount of irrelevant data and affect search users’experience.In order to solve the above problems,a top-k multi-keyword ciphertext retrieval scheme for supporting attribute revocation is proposed.On the basis of supporting multi-keyword retrieval,through the access strategy and semantic model of the attribute-based algorithm,the index table of attribute-file set mapping is constructed to realize fine-grained access control and authority management of the ciphertext,and supports top-k sorting and efficient retrieval.Homomorphic encrypted fuzzy data parameters are introduced to ensure encrypted data privacy and multi-user attribute authorization.Multi-layer data compression reduces the storage overhead,and can achieve attribute revocation with a low computational overhead.Theoretical analysis shows that the scheme has forward and backward security and keyword hiding,and can resist collusion attacks.The function and experimental evaluation of similar schemes have been carried out.The results prove that the scheme has a better comprehensive performance in terms of function and efficiency.