Property base keyword searching method supporting efficient revocation in cloud environment

Abstract

The invention discloses a property base keyword searching method supporting efficient revocation in the cloud environment. The method comprises the following steps: (1) initializing a system and managing a server to generate a public key and a master key; (2) registering a new user in a trusted third party and an authorized agency to obtain a register secret key and a property secret key; (3) allowing a data owner to generate encrypted files and indexes that are respectively sent to a cloud server and a management server, and allowing the management server to re-encrypt the index and send the new index to the cloud server; (4) in order to verify the identity of the user during the query phase, allowing the cloud server to generate a query mark; (5) allowing the user to generate an encrypted trapdoor to the management server, so that the management server re-encrypts and sends the received trapdoor to the cloud server; (6) when the cloud server receives the encrypted index and trapdoor, carrying out the keyword search; and (7) completing the user property revocation. The invention realizes searchable encryption based on the property encryption mechanism, so as to protect the user privacy and reduce the user expense.

Description

technical field [0001] The invention relates to cloud computing security technology, in particular to an attribute-based keyword search method supporting efficient revocation in a cloud environment. Background technique [0002] At present, cloud computing has become a new enterprise IT structure. Many companies have put their applications and databases on cloud servers, and have begun to enjoy many incomparable advantages brought by cloud computing, such as flexible computing resource configuration, universal and flexible access, saving a lot of resource costs, etc. Wait. However, privacy concerns remain a major obstacle preventing cloud computing from becoming more widely adopted. When sensitive data is outsourced to cloud servers, data owners are naturally concerned about their data privacy. Encryption before outsourcing has been seen as a fundamental approach to data privacy on cloud servers. However, how to make these encrypted data be used efficiently has become an...

AI Technical Summary

Problems solved by technology

[0004] Building a full fledged multi-data-owner solution presents many challenges compared to a single-data-owner solution

First, in the single data owner scheme, the data owner has to stay online all the time to generate encrypted indexes for users

However, when a large number of data owners are involved, allowing them to generate indexes online at the same time will greatly affect the flexibility and availability of the entire system

Second, no one is willing to share their own keys with others, and different data owners will use their own keys to encrypt the data they need to encrypt

Therefore, it is very challenging to implement secure, flexible, and efficient ciphertext search in cases where data is encrypted using different keys

Images