一种结合可验证数据库的属性可搜索加密方案

An Attribute-based Searchable Encryption with Verifiable Database

在可搜索加密应用于实际场景的过程中,大部分方案仅验证搜索结果而不是数据库,只能确保返回所有匹配的文件标识符,而不能对文档的完整性进行检查.本文提出了一种结合可验证数据库的属性可搜索加密方案(attribute-based searchable encryption with verifiable database,VDB-ABSE),兼具属性管理和可验证性.该方案构建了一个可验证数据库VDB,能够为用户提供搜索结果的证明.当数据使用者在使用关键词查询文件时,云存储平台先进行关键词的搜索,再通过二维线性表进行属性识别,匹配该属性权限下可以访问的数据集.云平台在搜索完成后将相应的文件和证明一起反馈给数据使用者,数据使用者可以对搜索结果进行验证,保证基于属性的可搜索加密方案的可验证性.通过实验分析和与现有方案进行对比,VDB-ABSE方案更具有优势.

In the process of applying searchable encryption to practical applications, most schemes can only verify the search results rather than the database, hence can only ensure that all matching file identifiers are returned, and cannot check the integrity of the document. This paper proposes an attribute-based searchable encryption with verifiable database(VDB-ABSE), which combines attribute management and verifiability. The scheme builds a verifiable database VDB, which can provide users with proof of search results. When data users use keywords to query files, the cloud storage platform first searches for keywords, and then uses a two-dimensional linear table to identify attributes to match the data set that can be accessed under the attribute permissions. After the search is completed, the cloud platform returns the corresponding documents and proofs to the data user. The data user can verify the search results to ensure the verifiability of the attribute-based searchable encryption scheme.Experimental analysis and comparison with existing schemes show that the proposed VDB-ABSE scheme has more advantages.