云存储中多授权多关键字属性基可搜索加密方案
Attribute-Based Multi-authority Multi-keyword Searchable Encryption Scheme for Cloud Storage
摘要
Abstract
To protect the security of private data stored in cloud servers,encryption is commonly used to process sensitive data.However,ciphertext data in the cloud impedes subsequent retrieval and sharing by users.Meanwhile,unauthorized access may cause privacy leakage of user data,and the traditional single-authorization mechanism is faced with perfor-mance bottlenecks and single point of failure risks.To solve the above problems,this paper proposes a multi-authority multi-keyword attribute-based searchable encryption scheme for cloud storage.Ciphertext-policy attribute-based encryption(CP-ABE)is adopted to ensure data confidentiality and implement fine-grained access control in the system.In addition,online/offline encryption technology is introduced.Complex operations such as symmetric key generation,share calculation of access policy matrix M and ciphertext component generation are executed in the offline phase,while only dot product operations are needed in the online encryption phase to generate the final ciphertext,which reduces the online encryption computational overhead on user clients.A cryptographic accumulator is used to construct keyword indices and verify key-words submitted by users during the search process,lowering the cost of complex cryptographic computations and improving the operational efficiency of the scheme.A result verification process is also added in the user decryption phase.The correctness of returned results is judged based on user attributes and access policies,so as to guarantee the integrity and validity of data returned by cloud servers.In terms of security,the proposed scheme is proven secure under selective keyword indistinguishability.Finally,simulation experiments are carried out.Experimental results demonstrate that compared with similar existing schemes,the proposed scheme improves the efficiency by 52.34%,62.23%and 53.97%in the stages of index generation,trapdoor generation and search respectively.关键词
可搜索加密/属性加密/细粒度访问控制/密码累加器Key words
searchable encryption/attribute-based encryption/fine-grained access control/cryptographic accumulator分类
信息技术与安全科学引用本文复制引用
谭越文,郭瑞,孙博,刘光军..云存储中多授权多关键字属性基可搜索加密方案[J].计算机科学与探索,2026,20(7):1985-1996,12.基金项目
国家密码科学基金(2025NCSF02037) （2025NCSF02037）
国家自然科学基金(62072369) （62072369）
陕西省重点研发计划基金(2020ZDLGY08-04) （2020ZDLGY08-04）
陕西省创新能力支持计划基金(2020KJXX-052) （2020KJXX-052）
陕西省自然科学基金一般项目(2024JC-YBMS-545,2024JC-YBMS-557) （2024JC-YBMS-545,2024JC-YBMS-557）
陕西省高校青年创新团队项目(23JP160) （23JP160）
西安市科技计划项目(23KGDW0018-2023). This work was supported by the National Cryptologic Science Fund of China(2025NCSF02037),the National Natural Science Foundation of China(62072369),the Shaanxi Provincial Key Research and Development Program(2020ZDLGY08-04),the Innovation Capacity Support Program of Shaanxi Province(2020KJXX-052),the General Program of Natural Science Foundation of Shaanxi Province(2024JC-YBMS-545,2024JC-YBMS-557),the Youth Innovation Team Project of Shaanxi Universities(23JP160),and the Science and Technology Program of Xi'an(23KGDW0018-2023). （23KGDW0018-2023）
