基于属性的公钥可搜索加密方案研究

发布时间：2018-04-29 16:46

本文选题：云计算 + 可搜索加密　；参考：《西安电子科技大学》2014年硕士论文

【摘要】：随着云计算技术的飞速发展,越来越多的企业和个人选择了把数据外包给云服务提供商。为了保障数据的安全和用户的隐私,数据通常是以密文的形式存储在云服务器上。然而,从实用性考虑,密文存储给数据检索带来了极大的挑战。如何对云服务器上的密文数据进行高效且安全地搜索极具研究价值。可搜索加密技术应运而生,它在保证数据机密性的同时,实现了对密文的检索。可搜索加密分为对称可搜索加密和公钥可搜索加密。与对称可搜索加密技术相比,公钥可搜索加密技术更具实际意义,它允许数据使用者直接对密文进行搜索,并不需要与数据拥有者进行交互。由于云服务器是不可信的,因此对搜索结果的有效性进行验证十分必要。此外,在云计算环境中,实现针对云存储的细粒度访问控制机制也非常重要。然而,已有的大多数公钥可搜索加密方案都无法对服务器返回的搜索结果进行验证,也没有实现细粒度访问控制机制。作为一个非常具有吸引力的密码学原语,属性基加密特别适用于云存储,它可以利用用户的属性实现细粒度的访问控制系统。在属性基加密中,数据拥有者制定访问策略并加密数据,一个用户能够解密一个密文当且仅当该用户的属性满足密文中潜在的访问策略。属性基加密机制与公钥可搜索加密技术的结合,不仅可以实现密文搜索的功能,而且可以实现针对云存储的细粒度访问控制。此外,数字签名和布隆过滤器等技术可使得用户对从云端获得的数据进行验证操作,有效地防止接收错误或者不完整的数据。对此研究具有很重要的应用价值。本文主要从安全性和可验证性方面对公钥可搜索加密技术作了深入研究,并取得了以下成果:1.提出了一种可验证的公钥可搜索加密方案。借助ELGamal签名算法对服务器返回的结果进行验证,有效地防止了服务器返回错误的结果。对比分析表明,本文提出的方案有着较高的效率和较强的安全性。2.对基于属性基加密的可验证的公钥可搜索加密方案在安全性和效率方面做了很大的改进。其一,去除了原方案中存在的安全通道;其二,在可验证性方面提出了一种不同的验证技巧。仿真实验及效率分析表明,本文的方案具有较高的效率及其安全性,特别适用于实际应用。
[Abstract]:With the rapid development of cloud computing technology, more and more enterprises and individuals choose to outsource data to cloud service providers. In order to protect the security of data and privacy of users, data is usually stored in the form of ciphertext on the cloud server. However, ciphertext storage poses a great challenge to data retrieval from practical point of view. How to search ciphertext data efficiently and safely on cloud server is of great value. Searchable encryption technology emerges as the times require, it not only ensures the confidentiality of data, but also realizes the retrieval of ciphertext. Searchable encryption is divided into symmetric searchable encryption and public key searchable encryption. Compared with symmetric searchable encryption technology, public key searchable encryption technology is more practical. It allows data users to search ciphertext directly and does not need to interact with the data owner. Because the cloud server is not trusted, it is necessary to verify the validity of the search results. In addition, in cloud computing environment, the implementation of fine-grained access control mechanism for cloud storage is also very important. However, most of the existing public-key searchable encryption schemes can not verify the search results returned by the server, nor do they implement fine-grained access control mechanisms. As a very attractive cryptographic primitive, attribute-base encryption is especially suitable for cloud storage, which can realize fine-grained access control system using user's attributes. In attribute-base encryption, the data owner formulates an access policy and encrypts the data. A user can decrypt a ciphertext if and only if the user's attributes satisfy the underlying access policy in the encrypted text. The combination of attribute base encryption mechanism and public key searchable encryption technology can not only realize the function of ciphertext search, but also realize fine-grained access control for cloud storage. In addition, technologies such as digital signature and Bloom filter enable users to verify data obtained from the cloud, effectively preventing the reception of incorrect or incomplete data. This research has very important application value. In this paper, the public key searchable encryption technology is studied in terms of security and verifiability, and the following results are obtained: 1. A verifiable public key searchable encryption scheme is proposed. The ELGamal signature algorithm is used to verify the result returned by the server, which effectively prevents the server from returning the wrong result. The comparative analysis shows that the proposed scheme has higher efficiency and stronger safety. 2. The security and efficiency of the verifiable public key searchable encryption scheme based on attribute-based encryption are greatly improved. One is to remove the existing secure channels in the original scheme, and the other is to propose a different verification technique in terms of verifiability. Simulation experiments and efficiency analysis show that the proposed scheme has high efficiency and security, and is especially suitable for practical application.
【学位授予单位】：西安电子科技大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TN918.4

【相似文献】