Abstract:Symmetric Searchable Encryption(SSE) is deemed to tackle the privacy issue as well as the operability and confidentiality in data outsourcing. However, most SSE schemes assume that the cloud is honest but curious. This assumption is not always applicable. And even if some schemes supported verification, integrity or freshness checking in a malicious cloud, but the performance and security functionalities are not fully exploited. In this paper, we propose an efficient SSE scheme based on B+-Tree and Counting Bloom Filter (CBF) which supports secure verification, dynamic updating, and multi-user queries. Comparing with the previous state of the arts, we design the new data structure CBF to support dynamic updating and boost verification. We also leverage the timestamp mechanism in the scheme to prevent the malicious cloud from launching a replay attack. The new designed CBF is like a front-engine to save user's cost for query and verification. And it can achieve more efficient query and verification with negligible false positive when there is no value matching the queried keyword. The CBF supports efficient dynamic updating by combining Bloom Filter with a one-dimensional array that provides the counting capability. Furthermore, we design the authenticator for CBF. We adopt B+-Tree for it is widely used in many database engines and file systems. We also give a brief security proof of our scheme. Then we provide a detailed performance analysis. Finally, we evaluate our scheme through comprehensive experiments. The results are consistent with our analysis and show that our scheme is secure, and more efficient compared with the previous schemes with the same functionalities. The average performance can be improved by about 20 percent for both the cloud servers and users when the missing rate of the searching keywords is 20 percent. And the higher the missing rate is, the more the performance can be improved.

Verifiable Searchable Symmetric Encryption from Indistinguishability Obfuscation.

Towards Efficient Verifiable Forward Secure Searchable Symmetric Encryption

Verifiable searchable symmetric encryption for conjunctive keyword queries in cloud storage

Enabling Generic, Verifiable, and Secure Data Search in Cloud Services

ESVSSE: Enabling Efficient, Secure, Verifiable Searchable Symmetric Encryption

Multi-User Verifiable Searchable Symmetric Encryption for Cloud Storage

Divertible Searchable Symmetric Encryption for Secure Cloud Storage

Slicer: Verifiable, Secure and Fair Search over Encrypted Numerical Data Using Blockchain

On the Security of Verifiable Searchable Encryption Schemes

SSE-CTC: Search over Encrypted Data with Owner-Enforced and Complete Time Constraints

Publicly Verifiable Boolean Query over Outsourced Encrypted Data.

A Searchable Symmetric Encryption Scheme Based on Dynamic Index

Dynamic Searchable Symmetric Encryption With Strong Security and Robustness

Interpreting and Mitigating Leakage-Abuse Attacks in Searchable Symmetric Encryption

Forward Private Multi-Client Searchable Encryption with Efficient Access Control in Cloud Storage

Augmenting Encrypted Search: A Decentralized Service Realization with Enforced Execution

Volume-Hiding Range Searchable Symmetric Encryption for Large-Scale Datasets

Secure Dynamic SSE Via Access Indistinguishable Storage.

Passive Attacks Against Searchable Encryption.

SAP-SSE: Protecting Search Patterns and Access Patterns in Searchable Symmetric Encryption

Making searchable symmetric encryption schemes smaller and faster