Research on Acceleration Method of Searchable Encryption of Private Data Based on Trusted Hardware

Journal of Information Security Reserach ›› 2021, Vol. 7 ›› Issue (4): 319-327.

Previous Articles Next Articles

Research on Acceleration Method of Searchable Encryption of Private Data Based on Trusted Hardware

Online:2021-04-05 Published:2021-04-14

基于可信硬件的隐私数据可搜索加密加速方法研究

杨光远1) 杨大利1) 张羽2) 马利民1) 张伟1)

1)(北京信息科技大学计算机学院, 北京市中国 100101)
2)(国家信息中心与网络安全部, 北京市中国 100045)

通讯作者: 张伟
作者简介:杨光远，1995年生，硕士，研究生，主要研究领域为大数据安全、计算机体系结构杨大利，男，1963年生，博士，副教授，主要研究领域为模式识别，图像处理张羽，1983年生，博士，高级工程师，主要研究领域为信息安全、数据安全、计算机物证马利民，1983年生，博士，副教授，主要研究方向：网络安全协议，信息隐藏技术，大数据安全张伟，男，1980年生，博士，教授，主要研究领域为大数据处理与软硬件协同设计

Abstract

Abstract: Searchable encryption (SE) is one of the key technologies for building encrypted databases. It allows the server to search for encrypted data without decrypting it. In order to solve the problem that the advanced SE solution reduces the efficiency of the SE and increases the communication cost between the client and the server, a hardware-assisted solution (also known as Intel SGX) is proposed to alleviate the above bottleneck. The key idea is to use SGX to take over The client tracks tasks such as keywords, adding data, and caching deleted data. Experimental results show that by introducing hardware-assisted solutions in the search process of encrypted data, the communication overhead between SGX and untrusted servers is effectively reduced, and the query performance of encrypted data is improved.

Key words: Searchable Encryption, Trusted Execution Environment, Data Encryption, Data Security, Intel SGX

摘要： 可搜索加密(Serachable Encryption，SE)是构建加密数据库的关键技术之一。它允许服务器在不解密的情况下搜索加密数据。为了解决传统SE方案降低SE查询效率，增加客户端和服务器之间通信成本这两个问题，提出了采用硬件辅助解决方案（例如Intel SGX）来解决上述问题，关键思想是利用SGX来接管客户端跟踪关键字、添加数据、缓存删除的数据等任务。实验结果表明通过在传统的可搜索加密方案中引入硬件辅助解决方案，有效地降低了客户端与不可信服务器之间的通信开销，并且提高了加密数据的查询性能。

关键词: 可搜索加密, 可信执行环境, 数据加密, 数据安全, Intel SGX

杨光远杨大利张羽马利民张伟. 基于可信硬件的隐私数据可搜索加密加速方法研究[J]. 信息安全研究, 2021, 7(4): 319-327.

References

[1] Song D, Wagner D, Perrig A.Practical Techniques for Searches on Encrypted Data[C]//Proc of the 2000 IEEE S&P’00.California:IEEE,2000:44-45
[2] 古宜平,马昌社.支持联合查询的高效可搜索对称加密方案[J].华南师范大学学报（自然科学版）, 2020, 52(3): 120-128
[3] 刘会梦,张光华,庞少博等.云计算下高效灵活的属性基加密方案[J].信息安全研究, 2017, 3(11): 1034-1039
[4] Bost R.Sophos:Forward secure searchable encryption[C]//Proc of the 2016 ACM SIGSAC Conf on Computer and Communications Security.New York:ACM, 2016:1143-1154
[5] Bost R,Minaud B,Ohrimenko O. Forward and Backward Private Searchable Encryption from Constrained Cryptographic Primitives[C]//Proc of the 2017 ACM SIGSAC Conf on Computer and Communications Security. New York:ACM,2017:1465-1482
[6] Ghareh Chamani J, Papadopoulos D, Papamanthou C, et al.New Constructions for Forward and Backward Private Symmetric Searchable Encryption[C]//Proc of the 2018 ACM SIGSAC Conf on Computer and Communications Security. New York:ACM,2018: 1038-1055
[7] 李涵,张晨,黄荷姣等.一种支持前向安全更新和验证的加密搜索算法[J].西安电子科技大学学报,2020,47(5):46-56
[8] Amjad G, Kamara S, Moataz T.Forward and backward private searchable encryption with SGX[C]//Proc of the 12th European Workshop on Systems Security.Dresden: EuroSec,2019:1-6
[9] Kamara S, Papamanthou C, Roeder T.Dynamic searchable symmetric encryption[C]//Proc of the 2012 ACM conf on Computer and communications security.New York:ACM,2012: 965-976
[10] Cash D, Jaeger J, Jarecki S, et al. Dynamic searchable encryption in very-large databases: data structures and implementation[C]//NDSS. 2014, 14: 23-26
[11] Zuo C, Sun S F, Liu J K, et al.Dynamic searchable symmetric encryption schemes supporting range queries with forward (and backward) security[C]//Proc of the European Symposium on Research in Computer Security. Springer, Cham, 2018: 228-246
[12] Priebe C, Vaswani K, Costa M.EnclaveDB: A secure database using SGX[C]//Proc of the 2018 IEEE S&P’18. San Francisco:IEEE, 2018: 264-278
[13] 王冠,梁世豪. 基于SGX的Hadoop KMS安全增强方案[J]. 信息安全研究, 2019, 5(6): 514-520
[14] Fuhry B, Bahmani R, Brasser F, et al. HardIDX: Practical and secure index with SGX[C]//Proc of the IFIP Annual Conference on Data and Applications Security and Privacy. Springer, Cham, 2017: 386-408
[15] Ren K, Guo Y, Li J, et al. Hybridx:New hybrid index for volume-hiding range queries in data outsourcing services[C]//Proc of the 2020 IEEE 40th International Conference on Distributed Computing Systems (ICDCS). Singapore,IEEE, 2020: 23-33
[16] 王进文, 江勇, 李琦,等. SGX 技术应用研究综述. 网络新媒体技术, 2017, 6(5): 3-9
[17] 王鹃,樊成阳,程越强等.SGX技术的分析和研究.软件学报,2018,29(9):2778−2798
[18] 董春涛,沈晴霓,罗武等.SGX应用支持技术研究进展.软件学报.2020:1-30
[19] Duan H, Wang C, Yuan X, et al.LightBox:Full-stack protected stateful middlebox at lightning speed[C]//Proc of the 2019 ACM SIGSAC Conference on Computer and Communications Security. London,2019: 2351-2367
[20] Yarom Y,Falkner K.FLUSH+RELOAD:A high resolution, low noise, L3 cache side-channel attack[C]//Proc of the 23rd {USENIX} Security Symposium.San Diego, CA ,2014:719-732

Research on Acceleration Method of Searchable Encryption of Private Data Based on Trusted Hardware

基于可信硬件的隐私数据可搜索加密加速方法研究

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics

[1]	. Research on E-Government Information Sharing Based on Zero Trust Model [J]. Journal of Information Security Reserach, 2021, 7(8): 739-744.
[2]	. [J]. Journal of Information Security Reserach, 2021, 7(8): 773-778.
[3]	. Research on the Data Security Management and Application Mode of Audit Informatization [J]. Journal of Information Security Reserach, 2021, 7(7): 661-668.
[4]	. ACARS Data Protection Technology Based on National Secret Algorithm [J]. Journal of Information Security Reserach, 2021, 7(4): 342-350.
[5]	. Governance of Data Security in Artificial Intelligence and Overview of Technology Development [J]. Journal of Information Security Research, 2021, 7(2): 110-119.
[6]	. Research on the Application of Mobile Police Data Security Technology in the Implementation of Classified Protection 2.0 [J]. Journal of Information Security Research, 2021, 7(2): 178-183.
[7]	. Research on Attribute Based Encryption Scheme in Cloud Computing [J]. Journal of Information Security Research, 2020, 6(8): 733-737.
[8]	. Research on cyber security management of the whole life cycle of information system of Integrated sports meeting [J]. Journal of Information Security Research, 2020, 6(7): 664-668.
[9]	. Research on Cloud Security System Based on Big Data Security Technology [J]. Journal of Information Security Research, 2020, 6(5): 404-420.
[10]	. Data Security Protection in Telecommuting [J]. Journal of Information Security Research, 2020, 6(4): 311-316.
[11]	. Research on Cybersecurity Certification System of Critical Information Infrastructure [J]. Journal of Information Security Research, 2019, 5(9): 847-850.
[12]	. Beijing Gas Group Industrial Internet Security Operation Platform Construction and Practice [J]. Journal of Information Security Research, 2019, 5(8): 734-739.
[13]	. A Data Security Verification Scheme Based on Task Macro [J]. Journal of Information Security Research, 2019, 5(7): 631-634.
[14]	. Research on Data Security of Electronic Official Document System of Party and Government Institutions Based on Cryptography [J]. Journal of Information Security Research, 2019, 5(6): 521-527.
[15]	. Research on Reference Architecture for Government Big Data Security [J]. Journal of Information Security Research, 2019, 5(5): 370-376.