隐藏令牌的公钥加密：安全搜索与单令牌陷阱门

192 浏览量更新于2024-08-26 收藏 658KB PDF 举报

本文主要探讨了一种名为"隐藏令牌可搜索的公钥加密"（Hidden-TokenSearchable Public-Key Encryption）的新型加密技术。这项研究由浙江大学计算机与信息工程学院的 Cong Zuo、Jun Shao、Zhe Liu、Yun Ling 和 Guiyi Wei 等学者共同提出，他们的研究兴趣集中在信息安全领域，特别是在隐私保护方面。隐藏令牌可搜索公钥加密的主要创新之处在于它引入了两个关键的安全特性：令牌匿名性和单令牌一个陷阱门原则。首先，令牌匿名性确保了客户端可以从数据所有者那里获取搜索令牌，同时无需透露关于底层关键词的任何信息，从而保护了用户的隐私。这使得用户可以在不暴露查询内容的情况下进行搜索请求，增强了隐私保护。其次，单令牌一个陷阱门原则进一步增强了系统的安全性。它规定，数据所有者生成的每个陷阱门只能对应一个搜索令牌，这意味着即使泄露了一个陷阱门，攻击者也无法利用它来生成更多的令牌，从而保护了系统的完整性。这对于防止滥用和恶意搜索至关重要。为了实现这一加密方案，研究人员提供了一个具体的构造，它结合了公钥加密原理和搜索功能，同时在随机 oracle 模型下进行了安全证明。随机 oracle 是一种理论模型，常用于密码学分析，因为它可以抽象地处理某些困难问题，如查找难题，以便分析系统的安全性。这篇研究论文不仅扩展了公钥加密技术的范畴，还引入了新的隐私保护策略，对于保护数据搜索中的隐私和控制访问权限具有重要意义。它对现有加密技术提出了新的挑战和解决方案，有助于推动密码学和信息安全领域的前沿发展。研究者们通过严谨的理论分析和实证验证，为构建更加安全、隐私友好的信息检索系统提供了有价值的理论基础。

Hidden-Token Searchable Public-Key Encryption

Cong Zuo

†

, Jun Shao

†∗

, Zhe Liu

‡

, Yun Ling

†

and Guiyi Wei

†

School of Computer and Information Engineering, Zhejiang Gongshang University, Hangzhou, China

Email: zuocong10@gmail.com, chn.junshao@gmail.com, yling@zjgsu.edu.cn, weigy@zjgsu.edu.cn

‡

APSIA, Interdisciplinary Centre for Security, Reliability and Trust (SnT), University of Luxembourg, Luxembourg

Email: sduliuzhe@gmail.com

Abstract—In this paper, we propose a variant of searchable

public-key encryption named hidden-token searchable public-key

encryption with two new security properties: token anonymity

and one-token-per-trapdoor. With the former security notion,

the client can obtain the search token from the data owner

without revealing any information about the underlying keyword.

Meanwhile, the client cannot derive more than one token from

one trapdoor generated by the data owner according to the latter

security notion. Furthermore, we present a concrete hidden-

token searchable public-key encryption scheme together with the

security proofs in the random oracle model.

Index Terms—Searchable Encryption, Public-Key, Hidden-

Token, Random Oracle Model

I. INTRODUCTION

In recent years, the development and deployment of Inter-

net of Things (IoT) have gained substantial attention in the

industry and research community since it enables people to

collect data everywhere including environment, infrastructures

and businesses. However, it is not easy to store this huge

amount of information locally. The popular solution nowadays

is to outsource these data to a third party (e.g. the cloud).

While these data are the assets of the one who implemented

the devices of IoT, they should be encrypted before outsource,

which at the same time jeopardizes the usefulness of these

data, such as searchability.

To solve this dilemma between usefulness and conﬁdential-

ity of data, many research efforts have been proposed, e.g.

Oblivious RAM (ORAM) [1], [2], Private Information Re-

trieval (PIR) [3], [4] and Searchable Encryption (SE) [5], [6],

[7], [8]. Among these, searchable encryption, which enables

searchability on ciphertexts, is the most promising technique.

For instance, the SE scheme in [8] allows many data sources

to generate encrypted index of the data and the data owner

to delegate the searchability by giving search trapdoors to

the clients. By using this SE scheme, the devices of IoT can

encrypt the collected data, and upload the resulting ciphertexts

with the index generated by using this SE scheme to the cloud

directly. Meanwhile, the data owner can generate the search

trapdoor according to the query from the client, who can later

use the search token generated from the trapdoor to ask the

cloud do the search on the index. The high level description

of the above framework is given in Fig. 1.

∗

Corresponding author.

Cloud

Query for TrapdoorSystem Parameter

Data

Owner

IoT

Clients

The Data Owner has no idea about

the underlying keyword!

Fig. 1. Architecture of our framework

In most of the existing SE schemes, the data owner is

usually considered as trusted, while the cloud and the client

are considered as malicious. They focus on how to protect the

conﬁdentiality of the trapdoor and the corresponding keyword,

while the privacy of the client is always ignored. However, in

some situations, the way how the client deals with the data

could be considered as an asset. For example, the information

of stock market and how to deal with the information are both

valuable. Hence, the keyword corresponding to the trapdoor

should be also protected. Once the client privacy (keyword

hidden) is considered, the beneﬁt of the data owner could be

hurt. For example, without knowing the underlying keyword of

the trapdoor, the client could trick the data owner to generate

one trapdoor corresponding to many tokens. It is not good for

the data owner especially when the payment of data service

is based on how many tokens the client obtains.

To address the above challenges, in this paper, we pro-

pose a variant of searchable encryption, named hidden-token

searchable encryption. One of the important security properties

of hidden-token searchable encryption is to protect the client

privacy, i.e., the data owner cannot deduce the keyword corre-

sponding to the queried trapdoor. Besides, we also guarantee

the beneﬁt of the data owner when the client privacy is under

protection, i.e., one trapdoor can derive only one token. The

contributions of this paper can be summarized as follows.

• To protect the client privacy while guaranteeing the ben-

eﬁt of the data owner, we propose the concept of hidden-

token searchable encryption, including its deﬁnitions and

security models.

• We present the ﬁrst concrete hidden-token searchable

encryption scheme along with its security analysis.

2017 IEEE Trustcom/BigDataSE/ICESS

DOI 10.1109/Trustcom/BigDataSE/ICESS.2017.244

248

下载后可阅读完整内容，剩余6页未读，立即下载

weixin_38514732

粉丝: 6

隐藏令牌的公钥加密：安全搜索与单令牌陷阱门

可搜索加密方案设计

javaweb使用rsa加密解密jar包使用rsa进行加密解密。前端使用js和公钥进行加密，

travis-encrypt:使用存储在服务器上的数据（例如AWS密钥）对存储库的Travis公钥进行加密的服务

量子时代基于格的语义可搜索加密方案

掌握RSA算法：深入解读公钥加密技术

开源AVR智能卡令牌：ECC和RSA加密支持

Travis加密服务：保护GitHub仓库公钥的新方法

掌握Java中JWT令牌的加密与解密操作指南

开源智能卡/令牌：结合RSA与ECC加密技术

掌握yocto-jwt：NodeJS JWT令牌的加密解密与管理

最新资源