属性加密与同义关键词搜索：电子医疗云中的数据检索

160 浏览量更新于2024-08-26 收藏 373KB PDF 举报

在云计算时代，数据隐私保护是至关重要的，特别是在处理敏感的电子医疗数据时。这篇由Yang在2015年发表在《Journal of Cloud Computing: Advances, Systems and Applications》的研究论文探讨了"基于属性的数据检索与语义关键字搜索在电子医疗云中的应用"（Attribute-based data retrieval with semantic keyword search for e-health cloud）。论文主要关注的是多发件人和多用户场景下的可搜索加密技术（Searchable Encryption, SE），旨在提供一个更为灵活且安全的数据访问控制方案。传统的可搜索加密方案通常聚焦于单个用户的使用，而Yang的研究则扩展到了支持多个发送者和接收者的环境。利用属性基础加密（Attribute-Based Encryption, ABE）技术，该方法允许对数据进行精细粒度的访问控制，确保只有授权用户才能获取特定信息。此外，论文还引入了同义词关键词搜索功能（Synonym Keyword Search Function, SK-ABSE），这使得用户可以使用多种表达方式查找所需的信息，提高了搜索的便利性和精确性。论文的创新之处在于，它不仅定义了SK-ABSE的概念，并给出了一个具体的实现构造。这种新型加密机制使得电子医疗云服务更加高效，同时考虑到用户权限管理和撤销的便利性。用户可以通过设定属性来控制其数据的检索权限，一旦需要，也能方便地撤销这些权限，确保数据隐私的安全性。关键词包括：可搜索加密、属性基础加密、同义词关键词搜索、多用户环境、数据隐私保护和电子医疗云。这篇研究对于理解和优化云存储中的数据管理策略，以及提升电子医疗信息系统的安全性具有重要意义，为后续的隐私保护和智能搜索技术发展提供了新的理论支持。

Yang Journal of Cloud Computing: Advances, Systems and

Applications

(2015) 4:10

DOI 10.1186/s13677-015-0034-8

RESEARCH Open Access

Attribute-based data retrieval with semantic

keyword search for e-health cloud

Yang Yang

1,2

Abstract

Data retrieval on encrypted documents is a very important technology in cloud storage, where encryption on

sensitive data is a necessary operation to protect documents privacy before they are outsourced to cloud. Most of

existing searchable encryption schemes concentrate on single-user scenario. In this paper, we focus on the multiple

sender and multiple user application scenario to provide a flexible search authorization searchable encryption (SE)

scheme. The attribute based encryption (ABE) technology is used to support fine-grained access control and the

synonym keyword search is enabled in the new scheme. The new primitive is named as attribute based searchable

encryption with synonym keyword search function (SK-ABSE). The formally definition of SK-ABSE is given together

with a concrete construction. This scheme also enables convenient user revocation mechanism.

Keywords: Searchable encryption; Cloud computing; Access control; Synonym keyword; User revocation

Introduction

With the fast development of cloud computing, more

and more users turns to new computing paradigm for

convenient accessing to a shared pool of resources. It

brings about ubiquitous and flexible access, on-demand

computing resource configuration and va st computation

resources at a very low price. Despite of these conve-

nience, it also has p otential risks when data owner loses

directly control over their information. Privacy concern

becomes the main obstacle that hiders the adoption of

cloud storage by corporations.

Data encryption is a straightforward way to protect

sec urity and privacy. However, traditional encry ption

methods will prevent the commonly us ed query opera-

tion on confidential data. The key word search becomes

difficult when data are encrypted. In 2004, Boneh et al.

[1] propo sed the first public key encryption scheme with

keyword search (PEKS) to deal with the issue of searching

on confidential data. Since then, many efforts are made to

improve the efficiency [2-4], enhance the security [5-7] or

provide new flexible properties [8-12].

Correspondence: yang.yang.research@gmail.com

College of Mathematics and Computer Science, Fuzhou University, Fuzhou

350108, China

Key Lab of Information Security of Networks Systems, Fuzhou University,

Fujian Province, China 350108, China

Although these schemes provide new features to search

on encrypted data, they can not realize flexible and fine-

grained access control on outsourced data. Sahai et al. [13]

proposed the concept of attribute-based encryption (ABE)

in Eurocrypt 2005, which extends the notion of iden-

tity based encryption (IBE). ABE schemes [14-18] enable

flexible access policy on se cret data and makes data shar-

ing quite eas y. In ABE scheme, each user has a set of

attributes. An access policy is defined to determine that

the users with certain attributes are authorized to access

the shared data.

In this paper, we propose a new primitive named

as attribute-based searchable encryption scheme with

semantic keyword search function (SK-ABSE). The main

contributions are listed as following.

– No Secret Key Sharing. A certain set of attributes is

associate with user, which is also embedded in user’s

private key. It avoids the risk that brought by secret

key sharing in multiple user. When a data sender

outsources the sensitive data to cloud server, he

specifies an access policy in the data encryption phase

and generate a secure index for extracted keyword.

Only if the set of attributes of user satisfies the access

structure in encrypted data, the user is permitted to

query on those information.

– Semantic Keyword Search. A novel point is that

semantic keyword search is enabled in this scheme. It

License (http://creativecommons.org/licenses/by/4.0), which permits unrestricted use, distribution, and reproduction in any

medium, provided the original work is properly credited.

下载后可阅读完整内容，剩余5页未读，立即下载

weixin_38620959

粉丝: 10
资源: 923

属性加密与同义关键词搜索：电子医疗云中的数据检索

论文研究-基于语义的图结构XML文档关键字检索方法 .pdf

Html文件关键字搜索

在加密的云数据上基于隐私的基于关键字的语义搜索

jQuery数据检索中根据关键字快速定位GridView指定行的实现方法

基于OWL属性特征的语义检索研究

基于Java语言的Markdown后端关键字检索设计源码

云中实用的私人信息检索支持关键字搜索

基于关键字密度的XML关键字检索.pdf

基于C++实现(控制台)关键字检索系统【100012650】

基于 C++ 实现（控制台）关键字检索系统【100010890】

最新资源