Abstract:Outsourcing data to cloud services is a good solution for users with limited computing resources. Privacy and confidentiality of data is jeopardized when data is transferred and shared in the cloud. The development of searchable cryptography offers the possibility to solve these problems. Symmetric searchable encryption (SSE) is popular among researchers because it is efficient and secure. SSE often requires the data sender and data receiver to use the same key to generate key ciphertext and trapdoor, which will obviously cause the problem of key management. Searchable encryption based on public key can simplify the key management problem. A public key encryption scheme with keyword search (PEKS) allows multiple senders to encrypt keywords under the receiver's public key. It is vulnerable to keyword guessing attacks (KGA) due to the small size of the keywords. The proposal of public key authenticated encryption with keyword search (PAEKS) is mainly to resist inside keyword guessing attacks. The previous security models do not involve the indistinguishability of the same keywords ( w 0 × × = w 1 ), which brings the user's search pattern easy to leak. The essential reason is that the trapdoor generation algorithm is deterministic. At the same time, most of the existing schemes use bilinear pair design, which greatly reduces the efficiency of the scheme. To address these problems, the paper introduces an improved PAEKS model. We design a lightweight public key authentication encryption scheme based on the Diffie-Hellman protocol. Then, we prove the ciphertext indistinguishability security and trapdoor indistinguishability security of the scheme in the improved security model. Finally, the paper demonstrates its comparable security and computational efficiency by comparing it with previous PAEKS schemes. Meanwhile, we conduct an experimental evaluation based on the cryptographic library. Experimental results show that the computational overhead of our scheme compared with the ciphertext generation algorithm, trapdoor generation algorithm and test algorithm of other schemes Our scheme reduces 274, 158 and 60 times, respectively.

Multi-Client Boolean File Retrieval with Adaptable Authorization Switching for Secure Cloud Search Services

A Multi-User Searchable Encryption Scheme with Keyword Authorization in a Cloud Storage

Dual-Server Boolean Data Retrieval for Highly-Scalable Secure File Sharing Services

Subversion-Resistant and Consistent Attribute-Based Keyword Search for Secure Cloud Storage

ABAEKS: Attribute-Based Authenticated Encryption With Keyword Search Over Outsourced Encrypted Data

Multi-owner Secure Encrypted Search Using Searching Adversarial Networks

Multi-client Verifiable Encrypted Keyword Search Scheme with Authorization over Outsourced Encrypted Data

A Dynamic and Non-Interactive Boolean Searchable Symmetric Encryption in Multi-Client Setting

Secure, Dynamic, and Efficient Keyword Search With Flexible Merging for Cloud Storage

ESVSSE: Enabling Efficient, Secure, Verifiable Searchable Symmetric Encryption

Efficiently Multi-User Searchable Encryption Scheme with Attribute Revocation and Grant for Cloud Storage

Keyword Search with Access Control over Encrypted Data in Cloud Computing

Efficient Strong Privacy-Preserving Conjunctive Keyword Search Over Encrypted Cloud Data

A Lightweight Authenticated Searchable Encryption without Bilinear Pairing for Cloud Computing

Non-interactive Boolean Searchable Asymmetric Encryption with Bilateral Access Control

Forward Private Multi-Client Searchable Encryption with Efficient Access Control in Cloud Storage

Multi-Keywords Searchable Attribute-Based Encryption With Verification and Attribute Revocation Over Cloud Data

Secure and Efficient Attribute-Based Encryption with Keyword Search.

A System of Shareable Keyword Search on Encrypted Data.

An Efficient Key-Policy Attribute-Based Searchable Encryption In Prime-Order Groups

Fuzzy Keyword Search over Encrypted Cloud Data with Dynamic Fine-grained Access Control.