Abstract:Cloud storage becomes the priority for storing and sharing data for enterprise users. Encrypting prior to uploading data to the cloud is the best way to protect business secrets, however, it hinders the convenient operations on plaintexts, such as searching over the cloud data. In addition, employees in an enterprise have multiple layer structures and a higher layer employee should have the privilege to monitor the lower layer employees' data to check if these users violate the regulation without letting the employees be aware of. Public key encryption with keyword search (PEKS) is a well-known cryptographic primitive suitable for secure cloud storage, which supports keyword search without decryption in public key encryption settings. Unfortunately, no existing PEKS scheme supports the monitoring function without authorization from the sender. To address this issue, we propose a variant of PEKS named Hierarchical Public Key Encryption with Keyword Search (HPEKS) and provide a semi-generic construction utilizing a public key tree (PKTree) and a PEKS scheme. To better suit for the enterprise secret data sharing, we build an advanced HPEKS scheme, named designated-tester decryptable hierarchical public key encryption with keyword search (dDHPEKS), which enjoys stronger security and integrates the public key and symmetric key encryptions. We prove our dDHPEKS scheme secure under the security definition in the random oracle model. Particularly, it satisfies the security against outside offline keyword guessing attacks and furthermore, enjoys the transparency property so that the sender does not need to know the internal hierarchy structure of an enterprise in order to share encrypted data to the enterprise. Theoretical evaluation and concrete experiments show that our dDHPEKS scheme has comparable running efficiency with existing PEKS schemes.

Blockchain-enabled one-to-many searchable encryption supporting designated server and multi-keywords for Cloud-IoMT

Blockchain-Assisted Public-Key Encryption with Keyword Search Against Keyword Guessing Attacks for Cloud Storage

A Multi-User Public Key Encryption with Multi-Keyword Search out of Bilinear Pairings

Blockchain-based multi-user certificateless encryption with keyword search for electronic health record sharing

BC-SABE: Blockchain-Aided Searchable Attribute-Based Encryption for Cloud-IoT

BPPKS: A blockchain-based privacy preserving and keyword-searchable scheme for medical data sharing

Secure Keyword Search over Encrypted Cloud Data Using Blockchain in Digital Document Sharing

Access control scheme based on blockchain and attribute-based searchable encryption in cloud environment

A Secure Cloud Data Sharing Protocol for Enterprise Supporting Hierarchical Keyword Search

Attribute-Based Access Control Meets Blockchain-Enabled Searchable Encryption: A Flexible and Privacy-Preserving Framework for Multi-User Search

PPSEB: A Postquantum Public-Key Searchable Encryption Scheme on Blockchain for E-Healthcare Scenarios

A lattice‐based searchable encryption scheme with multi‐user authorization for the certificateless cloud computing environment

BMSE: Blockchain-based multi-keyword searchable encryption for electronic medical records

Public Key Encryption with Keyword Search in Cloud: A Survey

Multi-user search on the encrypted multimedia database: lattice-based searchable encryption scheme with time-controlled proxy re-encryption

Attribute-based searchable encryption with decentralized key management for healthcare data sharing

BMKS: A Blockchain Based Multi-Keyword Search Scheme for Medical Data Sharing

Attribute Based Conjunctive Keywords Search with Verifiability and Fair Payment Using Blockchain

BPMS: Blockchain-based Privacy-preserving Multi-keyword Search in Multi-owner Setting