Security Analysis of Range Query with Single Assertion on Encrypted Data

doi:10.11772/j.issn.1001-9081.2014.04.1019

Journal of Computer Applications ›› 2014, Vol. 34 ›› Issue (4): 1019-1024.DOI: 10.11772/j.issn.1001-9081.2014.04.1019

Previous Articles Next Articles

Security Analysis of Range Query with Single Assertion on Encrypted Data

GU Chunsheng¹,²,JING Zhengjun¹,³,LI Hongwei¹,YU Zhimin¹

1. School of Computer Engineering, Jiangsu University of Technology, Changzhou Jiangsu 213001, China
2. School of Computer Science and Technology, University of Science and Technology of China, Hefei Anhui 230027, China
3. College of Computer, Nanjing University of Posts and Telecommunications, Nanjing Jiangsu 210003, China

Received:2013-10-12 Revised:2013-11-21 Online:2014-04-29 Published:2014-04-01
Contact: GU Chunsheng
Supported by:
;The natural science foundation of universities of Jiangsu province;The research fund for the graduate innovation program of Jiangsu province

单断言的密文区间检索方案的安全分析

古春生¹,²,景征骏¹,³,李红卫¹,于志敏¹

1. 江苏理工学院计算机工程学院,江苏常州 213001;
2. 中国科学技术大学计算机科学与技术学院,合肥 230027;
3. 南京邮电大学计算机学院,南京 210003

通讯作者: 古春生
作者简介:古春生(1971-),男,安徽芜湖人,副教授,博士,CCF会员,主要研究方向:密码分析、隐私保护;
景征骏(1978-),男,江苏丹阳人,讲师,硕士,CCF会员,主要研究方向:数字签名;
李红卫(1966-),男,山西阳城人,副教授,硕士,CCF会员,主要研究方向:云存储安全;
于志敏(1973-),男,吉林梅河口人,讲师,硕士,CCF会员,主要研究方向:公钥密码。
基金资助:
国家自然科学基金资助项目;江苏省高校自然科学研究项目;江苏省普通高校研究生科研创新计划项目;江苏理工学院科研基金资助项目

Abstract

Abstract:

To protect users' privacy, users often transfer encrypted sensitive data to a semi-trustworthy service provider. Cai et al.(CAI K, ZHANG M, FENG D. Secure range query with single assertion on encrypted data ［J］. Chinese Journal of Computers, 2011, 34(11): 2093-2103) first presented the ciphertext-only secure range query scheme with single assertion on encrypted data to prevent information leakage of users' privacy, whereas the previous schemes of range query on encrypted data were implemented through many assertions. Applying principle of trigonometric functions and matrix theory, the rank of the sensitive data was directly generated from protected interval index. Hence, this scheme was not ciphertext-only secure. To avoid this security drawback, a secure improvement scheme was constructed by introducing random element, and its complexity was analyzed.

摘要：

为保护用户数据隐私,用户通常将敏感数据加密后外包存储在半可信的服务器上。为防止泄露用户隐私信息,蔡克等(蔡克,张敏,冯登国.基于单断言的安全的密文区间检索［J］.计算机学报, 2011, 34(11):2093-2103)首次提出单断言密文区间检索方案,而之前在密文数据上的区间检索都通过多次断言实现。使用三角函数关系和矩阵理论,通过密文区间索引直接产生敏感数据的排列信息,证明该单断言密文检索方案不是唯密文安全的。为避免这种安全缺陷,通过引入随机元素构造了安全的单断言密文检索改进方案,并分析了改进方案的复杂性。

CLC Number:

TP309

GU Chunsheng JING Zhengjun LI Hongwei YU Zhimin. Security Analysis of Range Query with Single Assertion on Encrypted Data[J]. Journal of Computer Applications, 2014, 34(4): 1019-1024.

古春生景征骏李红卫于志敏. 单断言的密文区间检索方案的安全分析[J]. 计算机应用, 2014, 34(4): 1019-1024.

References

［1］CAI K, ZHANG M, FENG D. Secure range query with single assertion on encrypted data ［J］. Chinese Journal of Computers, 2011, 34(11): 2093-2103. (蔡克,张敏,冯登国.基于单断言的安全的密文区间检索［J］.计算机学报, 2011, 34(11):2093-2103.)
［2］AGRAWAL R, KIERNAN J, SRIKANT R, et al.Oder preserving encryption for numeric data ［C］// SIGMOD '04: Proceedings of the 2004 ACM SIGMOD International Conference on Management of Data. New York: ACM, 2004: 563-574.
［3］BOLDYREVA A, CHENETTE N, LEE Y, et al.Order-preserving symmetric encryption ［C］// EUROCRYPT '09: Proceedings of the 28th Annual International Conference on Advances in Cryptology: the Theory and Applications of Cryptographic Techniques, LNCS 5479. Berlin: Springer-Verlag, 2009: 224-241.
［4］HACIGMS H, IYER B, LI C, et al.Executing SQL over encrypted data in the database-service-provider model ［C］// SIGMOD '02: Proceedings of the 2002 ACM SIGMOD International Conference on Management of Data. New York: ACM, 2002: 216-227.
［5］HORE B, MEHROTRA S, TSUDIK G. A privacy-preserving index for range queries ［C］// VLDB '04: Proceedings of the 30th International Conference on Very Large Data Bases. Toronto: VLDB Endowment, 2004: 720-731.
［6］WANG J, DU X. LOB: Bucket based index for range queries ［C］// WAIM '08: Proceedings of the 2008 the 9th International Conference on Web-Age Information Management. Washington, DC: IEEE Computer Society, 2008: 86-92.
［7］ZHANG Y, LI W-X, NIU X-M. A method of bucket index over encrypted character data in database ［C］// IIH-MSP '07: Proceedings of the 3rd International Conference on Intelligent Information Hiding and Multimedia Signal Processing. Washington, DC: IEEE Computer Society, 2007: 186-189.
［8］LI J, OMIECINSKI E R. Efficiency and security trade-off in supporting range queries on encrypted databases ［C］// DBSec '05: Proceedings of the 9th Annual IFIP WG 11.3 Working Conference on Data and Applications Security, LNCS 3654. Berlin: Springer-Verlag, 2005: 69-83.
［9］WANG C, CAO N, REN K, et al.Enabling secure and efficient ranked keyword search over outsourced cloud data ［J］. IEEE Transactions on Parallel and Distributed Systems, 2012, 23(8): 1467-1479.
［10］BONEH D, WATERS B. Conjunctive, subset, and range queries on encrypted data ［C］// TCC 2007: Proceedings of the 4th Conference on Theory of Cryptography, LNCS 4392. Berlin: Springer-Verlag, 2007: 535-554.
［11］SHI E, BETHENCOURT J, CHAN T-H H, et al.Multidimensional range query over encrypted data ［C］// SP '07: Proceedings of the 2007 IEEE Symposium on Security and Privacy. Piscataway: IEEE, 2007: 350-364.
［12］BOLDYREVA A, CHENETTE N, O'NEILL A. Order-preserving encryption revisited: improved security analysis and alternative solutions ［C］// CRYPTO 2011: Proceedings of the 31st Annual Conference on Advances in Cryptology, LNCS 6841. Berlin: Springer-Verlag, 2011: 578-595.
［13］WONG W K, CHEUNG D W-L, KAO B, et al.Secure kNN computation on encrypted databases ［C］// SIGMOD '09: Proceedings of the 35th SIGMOD International Conference on Management of Data. New York: ACM, 2009: 139-152.
［14］LENSTRA A K, LENSTRA H W, Jr, LOVSZ L. Factoring polynomials with rational coefficients ［J］. Mathematische Annalen, 1982, 261(4): 515-534.
［15］SHOUP V. NTL: A library for doing number theory ［CP/OL］. [2013-05-22]. http://shoup.net/ntl/.〖BP(〗, Version 5.5.2, 2009. 2009.08.14.

[1]	SHE Wei, MA Tianxiang, FENG Haige, TIAN Zhao, LIU Wei. Blockchain covert communication method based on contract call concealment#br# #br# [J]. Journal of Computer Applications, 0, (): 0-0.
[2]	Rui GAO, Xuebin CHEN, Zucuan ZHANG. Dynamic social network privacy publishing method for partial graph updating [J]. Journal of Computer Applications, 2024, 44(12): 3831-3838.
[3]	Yong XIANG, Yanjun LI, Dingyun HUANG, Yu CHEN, Huiqin XIE. Differential and linear characteristic analysis of full-round Shadow algorithm [J]. Journal of Computer Applications, 2024, 44(12): 3839-3843.
[4]	Zhenhao ZHAO, Shibin ZHANG, Wunan WAN, Jinquan ZHANG, zhi QIN. Delegated proof of stake consensus algorithm based on reputation value and strong blind signature algorithm [J]. Journal of Computer Applications, 2024, 44(12): 3717-3722.
[5]	Yiting WANG, Wunan WAN, Shibin ZHANG, Jinquan ZHANG, Zhi QIN. Linkable ring signature scheme based on SM9 algorithm [J]. Journal of Computer Applications, 2024, 44(12): 3709-3716.
[6]	Jing LIANG, Wunan WAN, Shibin ZHANG, Jinquan ZHANG, Zhi QIN. Traceability storage model of charity system oriented to master-slave chain [J]. Journal of Computer Applications, 2024, 44(12): 3751-3758.
[7]	Deyuan LIU, Jingquan ZHANG, Xing ZHANG, Wunan WAN, Shibin ZHANG, Zhi QIN. Cross-chain identity authentication scheme based on certificate-less signcryption [J]. Journal of Computer Applications, 2024, 44(12): 3731-3740.
[8]	Xin ZHANG, Jinquan ZHANG, Deyuan LIU, Wunan WAN, Shibin ZHANG, Zhi QIN. Cross-chain identity management scheme based on identity-based proxy re-encryption [J]. Journal of Computer Applications, 2024, 44(12): 3723-3730.
[9]	DENG Yilin, YU Fajiang. Pseudo-random number generator based on LSTM and separable self-attention mechanism#br# #br# [J]. Journal of Computer Applications, 0, (): 0-0.
[10]	. Correlation power analysis of advanced encryption standard algorithm based on uniform manifold approximation and projection [J]. Journal of Computer Applications, 0, (): 0-0.
[11]	. Dynamic searchable encryption scheme based on puncture pseudorandom function [J]. Journal of Computer Applications, 0, (): 0-0.
[12]	. fedPF: Federated learning for personalization and fairness [J]. Journal of Computer Applications, 0, (): 0-0.
[13]	. Review of research on conflict-based cache side-channel attacks and eviction sets [J]. Journal of Computer Applications, 0, (): 0-0.
[14]	. Secure and efficient frequency estimation method based on shuffled differential privacy [J]. Journal of Computer Applications, 0, (): 0-0.
[15]	. Blockchain-based model for notarization of simulation testing data in autonomous driving [J]. Journal of Computer Applications, 0, (): 0-0.

Security Analysis of Range Query with Single Assertion on Encrypted Data

单断言的密文区间检索方案的安全分析

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics