云计算中可验证的语义模糊可搜索加密方案

Verifiable Semantic Fuzzy Searchable Encryption Scheme in Cloud Computing

针对目前可搜索加密方案不能进行语义模糊搜索的不足,并且无法充分应对"不诚实且好奇"的服务器威胁,提出基于混合云模型的可验证语义模糊可搜索加密方案。该方案通过Word Net对关键词进行语义扩展,并使用布隆过滤器构造安全索引,索引和查询经过布隆过滤器两轮映射保证了无关联性,确保了用户数据隐私的安全性。在混合云模型下,尽可能地减少终端计算开销,在私有云服务器上构建索引和验证集合并对搜索结果进行验证以确保搜索结果完整性,在公有云服务器上进行文档搜索确保搜索效率。通过在真实数据集上的测试,验证了该方案的有效性与可行性。

The existing searchable encryption schemes can neither support semantic fuzzy keyword search nor resist threats from 'dishonest-and-curious'data server.In order to solve these problems,a verifiable semantic fuzzy searchable encryption scheme based on hybrid cloud model was proposed.Semantic extension on keywords through Word Net was made and secure index through bloom filter was built.The index and query were dealt with by two rounds mapping of bloom filter so that the privacy of user was guaranteed.In hybrid cloud model,the computation overhead can be reduced at the user terminals.The private cloud server was responsible to build index and verify the results in order to ensure that all matched encrypted files are returned.The public cloud server implemented search operations on secure documents.The efficiency of the suggested scheme was tested through simulation on real data sets.