Ciphertext searching method and system supporting access control

Abstract

The invention is applicable to the field of data processing, and provides a searching method supporting access control. The searching method comprises the steps that: a client encrypts files of a database to obtain encrypted ciphertexts, and indexes are established and encrypted according to file identifiers to obtain a ciphertext database; the client receives a key ciphertext, a private key and aretrieval keyword set to generate a trap door; a cloud server retrieves the corresponding index ciphertext according to the trap door; the client carries out decryption on the index ciphertext by utilizing a key, uploads the file identifier obtained by decryption to the cloud server to obtain the encrypted ciphertext, and the encrypted ciphertext is decrypted to obtain a search result; and the client shows the search result according to a preset showing mode. In the implementation process of the embodiment of the invention, the ability of a searching client for data access is controlled by adopting attribute-based encryption, but access control is set to be carried out in the overall database instead of the indexes, so that calculation cost when a data owner encrypts the database can be greatly reduced; and meanwhile, in the process that a user acquires the search trap door, the data owner does not need to participate in.

Description

technical field [0001] The invention belongs to the technical field of data processing, and in particular relates to a ciphertext search method and system supporting access control. Background technique [0002] The emergence of cloud computing enables users to enjoy ubiquitous, convenient and on-demand network access to share configurable computing resource pools with high efficiency and minimal economic overhead. Despite the advantages of cloud services, outsourcing sensitive information (such as emails, personal health records, company financial data, government documents, etc.) to remote servers also raises privacy concerns. Once the user uploads the data to the cloud server, he loses control over the data, and the cloud service provider (Cloud Service Provider) that saves the user data can access the sensitive information of the user without authorization. Therefore, cloud security has become a challenge and a prerequisite for determining whether cloud storage can be m...

AI Technical Summary

Problems solved by technology

[0005] The technical problem to be solved by the present invention is to provide a ciphertext search method and system that supports access control, aiming to solve the problem in the prior art that the data owner needs to be online in real time when searching, and a large number of calculations are required to ensure access control.

Images