Journal of Information Security Reserach ›› 2024, Vol. 10 ›› Issue (11): 1064-.

Previous Articles     Next Articles

Dynamic Searchable Encryption Scheme Supporting Fuzzy Multiple Keywords

Li Li1, Tan Zhiwei2, Zhu Jiangwen3, Chen Jie1, and Wang Zhiqiang1   


  1. 1(Beijing Electronic Science and Technology Institute, Beijing 100070)
    2(School of Computer Science and Technology, Xidian University, Xi’an 710071)
    3(School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing 100876)
  • Online:2024-11-10 Published:2024-11-22

支持模糊多关键字的动态可搜索加密方案

李莉1谭智伟2朱江文3陈介1王志强1   

  1. 1(北京电子科技学院北京100070)
    2(西安电子科技大学计算机科学与技术学院西安710071)
    3(北京邮电大学网络空间安全学院北京100876)
  • 通讯作者: 李莉 博士,教授.主要研究方向为网络与系统安全、嵌入式安全. laury_li@126.com
  • 作者简介:李莉 博士,教授.主要研究方向为网络与系统安全、嵌入式安全. laury_li@126.com 谭智伟 硕士.主要研究方向为信息安全、可搜索加密. 21031211434@stu.xidian.edu.cn 朱江文 博士研究生.主要研究方向为网络安全. zhinen@bupt.edu.cn 陈介 硕士研究生.主要研究方向为密码学、隐私计算. cj_workhub@163.com 王志强 博士,副教授.主要研究方向为网络空间安全和漏洞挖掘. wangzq@besti.edu.cn

Abstract: With the development of cloud computing, the convenience and costeffectiveness of cloud storage have caused a large number of users to store personal data on thirdparty cloud servers. While encrypted storage of data in the cloud ensures data security, it also introduces challenges in data retrieval. Dynamic symmetric searchable encryption technology emerged as the times require, which not only effectively protects data privacy but also enables multikeyword joint search functions. Additionally, the fuzzy search introduced by this technology in practical applications enhances the user’s search experience and improves search efficiency. However, the current searchable encryption schemes that supports fuzzy search has certain security risks and do not adequately address potential information leakage issues during dynamic updates. To tacklethese issues, this paper proposes a dynamic searchable encryption scheme that supports fuzzy multikeywords, ensuring information security during dynamic updates, and also supporting multikeyword joint search and fuzzy search. This scheme designs a keyword encoding algorithm and localitysensitive hash function to build a fuzzy index, and uses a Bloom filter encryption algorithm to encrypt the index to achieve fuzzy search. Furthermore, a trusted execution environment is introduced to reduce the communication overhead and computing overhead as well as the number of interactions between users and servers. Finally, the safety and effectiveness of this scheme were verified through experiments.

Key words: dynamic symmetric searchable encryption, multiple keywords, fuzzy search, forward security, backward security

摘要: 随着云计算的发展,云存储的便捷性和经济性使得大量用户将个人数据存储在第三方云服务器上.云端数据的加密存储可确保数据的安全性,但也增加了数据检索的难度.动态对称可搜索加密技术应运而生,其不仅能有效保护数据隐私,还可实现多关键字联合搜索的功能.同时,该技术在实际应用中引入的模糊搜索还可以增强用户的搜索体验和提高搜索效率.当前支持模糊搜索的可搜索加密方案存在一定的安全隐患,其未考虑动态更新时潜在的信息泄露问题.为此,提出了一种支持模糊多关键字的动态可搜索加密方案,在保证动态更新时信息安全的同时,支持多关键字联合搜索以及模糊搜索.该方案设计了一种关键字编码算法和局部敏感哈希函数构建模糊索引,并使用布隆过滤器加密算法对该索引进行加密,以实现模糊搜索.此外,引入了可信执行环境降低用户和服务器之间的通信开销、计算开销以及交互次数.最后,通过实验验证了该方案的安全性和有效性.

关键词: 动态对称可搜索加密, 多关键字, 模糊搜索, 前向安全, 后向安全

CLC Number: