Adaptive secure outsourced attribute-based encryption scheme with keyword search

doi:10.11772/j.issn.1001-9081.2020121987

Journal of Computer Applications ›› 2021, Vol. 41 ›› Issue (11): 3266-3273.DOI: 10.11772/j.issn.1001-9081.2020121987

• Cyber security • Previous Articles Next Articles

Adaptive secure outsourced attribute-based encryption scheme with keyword search

Lifeng GUO¹^,²(), Qianli WANG¹

^1.School of Computer and Information Technology，Shanxi University，Taiyuan Shanxi 030006，China
^2.Institute of Big Data Science and Industry，Shanxi University，Taiyuan Shanxi 030006，China

Received:2020-12-17 Revised:2021-07-28 Accepted:2021-08-03 Online:2021-03-22 Published:2021-11-10
Contact: Lifeng GUO
About author:WU Guangfu，born in 1977，Ph. D.，associate professor. His research interests include information theory and channel coding， cryptography and network security，blockchain
DAI Ziheng，born in 1995，M. S. candidate. His research interests include channel coding，cryptography and information security.
Supported by:
the General Program of Natural Science Foundation of Shanxi(201901D111029);the Key Research and Development Program of Shanxi Province （International Science and Technology Cooperation）(201903D421003);the Science and Technology Innovation Project of Colleges and Universities of Shanxi Province(2019L0114)

自适应安全的带关键字搜索的外包属性基加密方案

郭丽峰¹^,²(), 王倩丽¹

^1.山西大学计算机与信息技术学院，太原 030006
^2.山西大学大数据科学与产业研究院，太原 030006

通讯作者: 郭丽峰
作者简介:郭丽峰（1975—），女，山西忻州人，教授，博士，主要研究方向：密码学、网络安全
王倩丽（1995—），女，山西汾阳人，硕士研究生，主要研究方向：密码学。
基金资助:
山西省自然科学基金面上项目(201901D111029);山西省重点研发计划（国际科技合作）项目(201903D421003);山西省高等学校科技创新项目(2019L0114)

Abstract

Abstract:

In order to solve the problems of high computational cost of Attribute-Based Encryption （ABE） scheme and low efficiency of data search in cloud servers simultaneously， an Outsourced Attribute-Based Encryption scheme with Keyword Search （OABE-KS） was proposed. Firstly， the outsourced computation technology was used for reducing the local computing cost of encryption and decryption users to the constant level. Then， the indexes and trapdoors of the corresponding keywords were generated by the encryption user and the decryption user respectively， and the cloud server was used to match them. After that， the successful matching results would be returned to the decryption user by the cloud server. The adaptive security of the proposed scheme was proved under the composite order group. According to the experimental analysis， when the number of attributes changes from 10 to 100， the running time of each stage of the proposed scheme is basically unchanged， showing that the running time of the proposed scheme in each stage does not vary with the number change of attributes. Experimental results show that， the proposed scheme is suitable for the application on resource-limited devices and is not affected by the number of attributes in practical applications.

Key words: cloud server, Attribute-Based Encryption (ABE), verifiable outsourced computation, keyword search, adaptive security, dual-system

摘要：

为同时解决属性基加密（ABE）方案的计算成本过高和云服务器中数据查找效率低下的问题，提出了一种带关键字搜索的外包属性基加密（OABE-KS）方案。首先，使用外包计算技术将加解密用户的本地计算成本降低到常量级；然后，由加密用户和解密用户分别生成对应关键字的索引和陷门，并由云服务器为其进行匹配，在此之后云服务器会将匹配成功的结果返回给解密用户。在合数阶群下证明了所提方案是自适应安全的。根据实验分析可知，属性数量从10个到100个变化的过程中，该方案各个阶段的运行时间基本不变，可见该方案在各个阶段的运行时间不随属性数量的变化而变化。实验结果表明，该方案适合应用在资源受限的设备上，使其在实际应用中不受属性数量变化的影响。

关键词: 云服务器, 属性基加密, 可验证外包计算, 关键字搜索, 自适应安全, 双系统

CLC Number:

TP309

Lifeng GUO, Qianli WANG. Adaptive secure outsourced attribute-based encryption scheme with keyword search[J]. Journal of Computer Applications, 2021, 41(11): 3266-3273.

郭丽峰, 王倩丽. 自适应安全的带关键字搜索的外包属性基加密方案[J]. 《计算机应用》唯一官方网站, 2021, 41(11): 3266-3273.

Figures/Tables 7

Fig. 1 System structure of outsourced attribute-based encryption scheme with keyword search

Tab. 1 Function and security comparison of different schemes

方案	大属性集合	外包加/解密计算	关键字可搜索	标准模型	完全安全
文献［8］方案	×	×	√	√	√
文献［16］方案	√	√	√	×	×
文献［17］方案	√	√	√	×	×
文献［18］方案	×	√	√	×	×
文献［5］方案	×	×	×	√	√
本文方案	√	√	√	√	√

Tab. 2 Performance comparison of different schemes

方案	Setup	Encrypt_DO	Test	Decrypt_DU
文献［8］方案	$P + E G T$	$4 E G$	$2 P$
文献［16］方案	$P + E G T$	$P + E G + E G T$	$l 3 P + 2 E G + E G T$	$E G T$
文献［17］方案	$6 E G T + 2 P$	$4 E G T + 4 + \| l \| E G$	$4 P$	$2 P$
文献［18］方案	$P + E G T + (3 + \| U \|) E G$	$(2 \| l \| + 1) E G$	$2 P$	$E G T$
文献［5］方案	$(2 + \| U \|) E G + P + E G T$	$E G T + (2 + 3 \| l \|) E G$		$(2 + 2 \| S \|) P$
本文方案	$2 E G + P + E G T$	$4 E G T$	$3 P + E G T$	$E G T$

Tab. 2 Performance comparison of different schemes

方案	Setup	Encrypt_DO	Test	Decrypt_DU
文献［8］方案	$P + E G T$	$4 E G$	$2 P$
文献［16］方案	$P + E G T$	$P + E G + E G T$	$l 3 P + 2 E G + E G T$	$E G T$
文献［17］方案	$6 E G T + 2 P$	$4 E G T + 4 + \| l \| E G$	$4 P$	$2 P$
文献［18］方案	$P + E G T + (3 + \| U \|) E G$	$(2 \| l \| + 1) E G$	$2 P$	$E G T$
文献［5］方案	$(2 + \| U \|) E G + P + E G T$	$E G T + (2 + 3 \| l \|) E G$		$(2 + 2 \| S \|) P$
本文方案	$2 E G + P + E G T$	$4 E G T$	$3 P + E G T$	$E G T$

Fig. 2 Time of system initialization and setup for different schemes

Fig. 3 Local running time of encryption user for different schemes

Fig. 4 Search time of cloud server for different schemes

Fig. 5 Local running time of decryption user for different schemes

References 19

1	SAHAI A， WATERS B. Fuzzy identity-based encryption ［C］// Proceedings of the 2005 Annual International Conference on the Theory and Applications of Cryptographic Techniques， LNCS3494. Berlin： Springer， 2005： 457-473.
2	GOYAL V， PANDEY O， SAHAI A， et al. Attribute-based encryption for fine-grained access control of encrypted data ［C］// Proceedings of the 2006 13th ACM Conference on Computer and Communications Security. New York： ACM， 2006： 89-98. 10.1145/1180405.1180418
3	BETHENCOURT J， SAHAI A， WATERS B. Ciphertext-policy attribute-based encryption ［C］// Proceedings of the 2007 IEEE Symposium on Security and Privacy. Piscataway： IEEE， 2007： 321-334. 10.1109/sp.2007.11
4	WATERS B. Ciphertext-policy attribute-based encryption： an expressive， efficient， and provably secure realization ［C］// Proceedings of the 2011 International Workshop on Public Key Cryptography， LNCS6571. Berlin： Springer， 2011： 53-70.
5	LEWKO A， WATERS B. New proof methods for attribute-based encryption： achieving full security through selective techniques ［C］// Proceedings of the 2012 Annual Cryptology Conference， LNCS7417. Berlin： Springer， 2012： 180-198.
6	BONEH D， DI CRESCENZO G， OSTROVSKY R， et al. Public key encryption with keyword search ［C］// Proceedings of the 2004 International Conference on the Theory and Applications of Cryptographic Techniques， LNCS3027. Berlin： Springer， 2004： 506-522.
7	SHAO Z Y， YANG B. On security against the server in designated tester public key encryption with keyword search ［J］. Information Processing Letters， 2015， 115（12）： 957-961. 10.1016/j.ipl.2015.07.006
8	徐磊，许春根，蔚晓玲.云存储上高效安全的数据检索方案［J］.密码学报，2016，3（4）：330-339. 10.13868/j.cnki.jcr.000132
	XU L， XU C G， YU X L. Secure and efficient data retrieval scheme using searchable encryption in cloud ［J］. Journal of Cryptologic Research， 2016， 3（4）： 330-339. 10.13868/j.cnki.jcr.000132
9	HUANG Q， LI H B. An efficient public-key searchable encryption scheme secure against inside keyword guessing attacks ［J］. Information Sciences， 2017， 403/404： 1-14. 10.1016/j.ins.2017.03.038
10	LU Y， LI J G. Constructing designated server public key encryption with keyword search schemes withstanding keyword guessing attacks ［J］. International Journal of Communication Systems， 2019， 32（3）： Article No.e3862. 10.1002/dac.3862
11	LU Y， LI J G. Efficient searchable public key encryption against keyword guessing attacks for cloud-based EMR systems ［J］. Cluster Computing， 2019， 22（1）： 285-299. 10.1007/s10586-018-2855-y
12	WANG C J， LI W T， LI Y， et al. A ciphertext-policy attribute-based encryption scheme supporting keyword search function ［C］// Proceedings of the 2013 International Symposium on Cyberspace Safety and Security， LNCS8300. Cham： Springer， 2013： 377-386.
13	HAYATA J， ISHIZAKA M， SAKAI Y， et al. Generic construction of adaptively secure anonymous key-policy attribute-based encryption from public-key searchable encryption ［J］. IEICE Transactions on Fundamentals of Electronics， Communications and Computer Sciences， 2020， E103-A（1）： 107-113. 10.1587/transfun.2019cip0014
14	CAO M S， WANG L H， QIN Z G， et al. A lightweight fine-grained search scheme over encrypted data in cloud-assisted wireless body area networks ［J］. Wireless Communications and Mobile Computing， 2019， 2019： Article No.9340808. 10.1155/2019/9340808
15	GREEN M， HOHENBERGER S， WATERS B. Outsourcing the decryption of ABE ciphertexts ［C］// Proceedings of the 2011 20th USENIX Conference on Security. Berkeley： USENIX Association， 2011： 523-528.
16	陈冬冬，曹珍富，董晓蕾.在线/离线密文策略属性基可搜索加密［J］.计算机研究与发展，2016（53）：2365-2375.（CHEN D D， CAO Z F， DONG X L. Online/offline ciphertext-policy attribute-based searchable encryption ［J］. Journal of Computer Research and Development， 2016， 53（10）： 2365-2375.）. 10.7544/issn1000-1239.2016.20160416
17	WANG S P， YAO L S， CHEN J J， et al. KS-ABESwET： a keyword searchable attribute-based encryption scheme with equality test in internet of things ［J］. IEEE Access， 2019， 7： 80675-80696. 10.1109/access.2019.2922646
18	MIAO Y B， DENG R H， LIU X M， et al. Multi-authority attribute-based keyword search over encrypted cloud data ［J］. IEEE Transactions on Dependable and Secure Computing， 2021， 18（4）： 1667-1680. 10.1109/tdsc.2019.2935044
19	BONEH D， GOH E J， NISSIM K. Evaluating 2-DNF formulas on ciphertext ［C］// Proceedings of the 2005 Theory of Cryptography Conference， LNCS3378. Berlin： Springer， 2005： 325-341.

[1]	Xiaoqiong PANG, Ting YANG, Wenjun CHEN, Yunting WANG, Tianye LIU. Digital rights management scheme based on secret sharing in blockchain environment [J]. Journal of Computer Applications, 2021, 41(11): 3257-3265.
[2]	YU Qingfei, TU Guangsheng, LI Ningbo, ZHOU Tanping. Multi-hop multi-policy attributed-based fully homomorphic encryption scheme [J]. Journal of Computer Applications, 2019, 39(8): 2326-2332.
[3]	LI Cong, YANG Xiaoyuan, BAI Ping, WANG Xu'an. Traceable and fully verifiable for outsourced decryption for CP-ABE [J]. Journal of Computer Applications, 2018, 38(8): 2249-2255.
[4]	LI Cong, YANG Xiaoyuan, WANG Xu'an. Effecient outsourced computing based on extended attribute-based functional encryption [J]. Journal of Computer Applications, 2018, 38(6): 1633-1639.
[5]	CUI Weirong, DU Chenglie. Privacy preserving attribute matching method based on CP-ABE in social networks [J]. Journal of Computer Applications, 2018, 38(4): 1051-1057.
[6]	ZHANG Guanghua, YANG Yaohong, PANG Shaobo, CHEN Zhenguo. Adaptive security mechanism for defending On-off attack based on trust in Internet of things [J]. Journal of Computer Applications, 2018, 38(3): 682-687.
[7]	YANG Hongyu, WANG Yue. Multi-keyword ciphertext search method in cloud storage environment [J]. Journal of Computer Applications, 2018, 38(2): 343-347.
[8]	XU Hailin, LU Yang. Efficient bilinear-pairing-free certificate-based encryption scheme with keyword search [J]. Journal of Computer Applications, 2018, 38(2): 379-385.
[9]	CHEN Danwei, YANG Sheng. Dynamic trust level based ciphertext access control scheme [J]. Journal of Computer Applications, 2017, 37(6): 1587-1592.
[10]	WANG Jingwei, YIN Xinchun. Ciphertext policy attribute-based encryption scheme with weighted attribute revocation [J]. Journal of Computer Applications, 2017, 37(12): 3423-3429.
[11]	LI Zuohui, CHEN Xingyuan. Attribute-based encryption with fast decryption on prime order groups [J]. Journal of Computer Applications, 2016, 36(3): 637-641.
[12]	LI Zuohui, YANG Mengmeng, CHEN Xingyuan. Attribute repeatable multi-authority attribute-based encryption scheme on prime order group [J]. Journal of Computer Applications, 2015, 35(8): 2189-2194.
[13]	WU Shengyan XU Li LIN Changlu. Secure and distributed cloud storage model from threshold attribute-based encryption [J]. Journal of Computer Applications, 2013, 33(07): 1880-1884.
[14]	GAO Xunbing MA Chunguang ZHAO Ping XIAO Liang. Fine-grained access control scheme for social network with transitivity [J]. Journal of Computer Applications, 2013, 33(01): 8-11.
[15]	LI Jiang-hua ZHENG Jian. Heuristic ontology search mechanism based on user behavior [J]. Journal of Computer Applications, 2012, 32(10): 2891-2894.

Adaptive secure outsourced attribute-based encryption scheme with keyword search

自适应安全的带关键字搜索的外包属性基加密方案

RichHTML

PDF

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 7

References 19

Related Articles 15

Recommended Articles

Metrics