Abstract:Symmetric Searchable Encryption(SSE) is deemed to tackle the privacy issue as well as the operability and confidentiality in data outsourcing. However, most SSE schemes assume that the cloud is honest but curious. This assumption is not always applicable. And even if some schemes supported verification, integrity or freshness checking in a malicious cloud, but the performance and security functionalities are not fully exploited. In this paper, we propose an efficient SSE scheme based on B+-Tree and Counting Bloom Filter (CBF) which supports secure verification, dynamic updating, and multi-user queries. Comparing with the previous state of the arts, we design the new data structure CBF to support dynamic updating and boost verification. We also leverage the timestamp mechanism in the scheme to prevent the malicious cloud from launching a replay attack. The new designed CBF is like a front-engine to save user's cost for query and verification. And it can achieve more efficient query and verification with negligible false positive when there is no value matching the queried keyword. The CBF supports efficient dynamic updating by combining Bloom Filter with a one-dimensional array that provides the counting capability. Furthermore, we design the authenticator for CBF. We adopt B+-Tree for it is widely used in many database engines and file systems. We also give a brief security proof of our scheme. Then we provide a detailed performance analysis. Finally, we evaluate our scheme through comprehensive experiments. The results are consistent with our analysis and show that our scheme is secure, and more efficient compared with the previous schemes with the same functionalities. The average performance can be improved by about 20 percent for both the cloud servers and users when the missing rate of the searching keywords is 20 percent. And the higher the missing rate is, the more the performance can be improved.

Volume-Hiding Multi-Dimensional Verifiable Dynamic Searchable Symmetric Encryption Scheme for Cloud Computing

Dynamic Searchable Symmetric Encryption With Strong Security and Robustness

A blockchain-based dynamic searchable symmetric encryption scheme under multiple clouds

An Efficient Symmetric Searchable Encryption Scheme for Dynamic Dataset in Cloud Computing Paradigms.

Multi-User Verifiable Searchable Symmetric Encryption for Cloud Storage

Volume-Hiding Range Searchable Symmetric Encryption for Large-Scale Datasets

Efficient Strong Privacy-Preserving Conjunctive Keyword Search Over Encrypted Cloud Data

Divertible Searchable Symmetric Encryption for Secure Cloud Storage

ESVSSE: Enabling Efficient, Secure, Verifiable Searchable Symmetric Encryption

Differential Privacy Enhanced Dynamic Searchable Symmetric Encryption for Cloud Environments.

Dynamic Searchable Symmetric Encryption Schemes Supporting Range Queries with Forward/Backward Privacy

Forward Private Multi-Client Searchable Encryption with Efficient Access Control in Cloud Storage

Non-interactive Multi-client Searchable Symmetric Encryption with Small Client Storage

Enabling Generic, Verifiable, and Secure Data Search in Cloud Services

Verifiable searchable symmetric encryption for conjunctive keyword queries in cloud storage

MFPSE: Multi-user Forward Private Searchable Encryption with dynamic authorization in cloud computing

Towards Achieving Keyword Search over Dynamic Encrypted Cloud Data with Symmetric-Key Based Verification

A Searchable Symmetric Encryption Scheme Based on Dynamic Index

Verifiable dynamic ranked search with forward privacy over encrypted cloud data

DMSE: Dynamic Multi-keyword Search Encryption based on inverted index

d-DSE: Distinct Dynamic Searchable Encryption Resisting Volume Leakage in Encrypted Databases