Attribute-based keyword search method and cloud computing application system supporting efficient revocation in cloud environment

Abstract

The invention discloses an attribute-based keyword search method that supports high-efficiency revocation in a cloud environment, comprising the following steps: (1) system initialization, a management server generates a public key and a master key; (3) The data owner generates encrypted files and indexes, and sends them to the cloud server and the management server respectively, and the management server re-encrypts the index and sends it to the cloud server; ( 4) In order to verify the identity of the user in the query phase, the cloud server generates a query token; (5) the user generates an encrypted trapdoor and sends it to the management server, and the management server re-encrypts the received trapdoor and sends it to the cloud server; (6) the cloud server receives Go to the encrypted index and trapdoor to search for keywords; (7) complete the revocation of user attributes. The present invention realizes searchable encryption based on an attribute encryption mechanism, protects user privacy, and reduces user expenses.

Description

technical field [0001] The invention relates to cloud computing security technology, in particular to an attribute-based keyword search method and a cloud computing application system that support efficient revocation in a cloud environment. Background technique [0002] At present, cloud computing has become a new enterprise IT structure. Many companies have put their applications and databases on cloud servers, and have begun to enjoy many incomparable advantages brought by cloud computing, such as flexible computing resource configuration, universal and flexible access, saving a lot of resource costs, etc. Wait. However, privacy concerns remain a major obstacle preventing cloud computing from becoming more widely adopted. When sensitive data is outsourced to cloud servers, data owners are naturally concerned about their data privacy. Encryption before outsourcing has been seen as a fundamental approach to data privacy on cloud servers. However, how to make these encry...

AI Technical Summary

Problems solved by technology

[0004] Building a full fledged multi-data-owner solution presents many challenges compared to a single-data-owner solution

First, in the single data owner scheme, the data owner has to stay online all the time to generate encrypted indexes for users

However, when a large number of data owners are involved, allowing them to generate indexes online at the same time will greatly affect the flexibility and availability of the entire system

Second, no one is willing to share their own keys with others, and different data owners will use their own keys to encrypt the data they need to encrypt

Therefore, it is very challenging to implement secure, flexible, and efficient ciphertext search in cases where data is encrypted using different keys

Images