保障组织数据安全:一种具有高效解密的基于角色的授权关键词搜索方案
Securing Organization's Data: A Role-Based Authorized Keyword Search Scheme with Efficient Decryption
AI总结:
针对组织加密数据外包后的关键词搜索挑战,提出基于角色加密(RBE)的授权关键词搜索方案,支持多组织环境、高效解密与联合搜索,外包昂贵密码操作,经安全分析证明语义安全,性能适用于实际应用。
摘要:
为在确保数据保密性的同时提升数据可用性与可访问性,组织常倾向于将加密数据外包至云存储服务器,这带来了加密数据关键词搜索的挑战。本文提出一种在云环境中使用基于角色加密(RBE)技术的新型授权关键词搜索方案。本文贡献是多方面的:第一,提出仅允许被分配适当角色的授权用户,在不泄露任何敏感信息的情况下,将加密数据的关键词数据搜索能力委托给云提供商的关键词搜索方案;第二,支持多组织云环境,用户可关联多个组织;第三,所提方案提供高效解密、联合关键词搜索及撤销机制;第四,以安全方式将解密中昂贵的密码学操作外包至云;第五,通过形式化安全分析证明所提方案在选择明文攻击和选择关键词攻击下具有语义安全性;最后,性能分析表明所提方案适用于实际应用。
英文摘要:
For better data availability and accessibility while ensuring data secrecy, organizations often tend to outsource their encrypted data to the cloud storage servers, thus bringing the challenge of keyword search over encrypted data. In this paper, we propose a novel authorized keyword search scheme using Role-Based Encryption (RBE) technique in a cloud environment. The contributions of this paper are multi-fold. First, it presents a keyword search scheme which enables only the authorized users, having proper assigned roles, to delegate keyword-based data search capabilities over encrypted data to the cloud providers without disclosing any sensitive information. Second, it supports a multi-organization cloud environment, where the users can be associated with more than one organization. Third, the proposed scheme provides efficient decryption, conjunctive keyword search and revocation mechanisms. Fourth, the proposed scheme outsources expensive cryptographic operations in decryption to the cloud in a secure manner. Fifth, we have provided a formal security analysis to prove that the proposed scheme is semantically secure against Chosen Plaintext and Chosen Keyword Attacks. Finally, our performance analysis shows that the proposed scheme is suitable for practical applications.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。