Abstract:Outsourcing data to cloud services is a good solution for users with limited computing resources. Privacy and confidentiality of data is jeopardized when data is transferred and shared in the cloud. The development of searchable cryptography offers the possibility to solve these problems. Symmetric searchable encryption (SSE) is popular among researchers because it is efficient and secure. SSE often requires the data sender and data receiver to use the same key to generate key ciphertext and trapdoor, which will obviously cause the problem of key management. Searchable encryption based on public key can simplify the key management problem. A public key encryption scheme with keyword search (PEKS) allows multiple senders to encrypt keywords under the receiver's public key. It is vulnerable to keyword guessing attacks (KGA) due to the small size of the keywords. The proposal of public key authenticated encryption with keyword search (PAEKS) is mainly to resist inside keyword guessing attacks. The previous security models do not involve the indistinguishability of the same keywords ( w 0 × × = w 1 ), which brings the user's search pattern easy to leak. The essential reason is that the trapdoor generation algorithm is deterministic. At the same time, most of the existing schemes use bilinear pair design, which greatly reduces the efficiency of the scheme. To address these problems, the paper introduces an improved PAEKS model. We design a lightweight public key authentication encryption scheme based on the Diffie-Hellman protocol. Then, we prove the ciphertext indistinguishability security and trapdoor indistinguishability security of the scheme in the improved security model. Finally, the paper demonstrates its comparable security and computational efficiency by comparing it with previous PAEKS schemes. Meanwhile, we conduct an experimental evaluation based on the cryptographic library. Experimental results show that the computational overhead of our scheme compared with the ciphertext generation algorithm, trapdoor generation algorithm and test algorithm of other schemes Our scheme reduces 274, 158 and 60 times, respectively.

Multi-client Verifiable Encrypted Keyword Search Scheme with Authorization over Outsourced Encrypted Data

Optimized Verifiable Fine-Grained Keyword Search in Dynamic Multi-Owner Settings

VKSE-MO: verifiable keyword search over encrypted data in multi-owner settings

ABAEKS: Attribute-Based Authenticated Encryption With Keyword Search Over Outsourced Encrypted Data

VMKDO: Verifiable multi-keyword search over encrypted cloud data for dynamic data-owner

Multi-Keywords Searchable Attribute-Based Encryption With Verification and Attribute Revocation Over Cloud Data

Verifiable Attribute-Based Multi-Keyword Search Scheme with Sensitive Information Hiding for Cloud-Assisted E-Healthcare Sharing Systems

A Multi-User Searchable Encryption Scheme with Keyword Authorization in a Cloud Storage

Subversion-Resistant and Consistent Attribute-Based Keyword Search for Secure Cloud Storage

A Lightweight Authenticated Searchable Encryption without Bilinear Pairing for Cloud Computing

On the Security of Secure Keyword Search and Data Sharing Mechanism for Cloud Computing

Efficiently Multi-User Searchable Encryption Scheme with Attribute Revocation and Grant for Cloud Storage

Multi-Client Boolean File Retrieval with Adaptable Authorization Switching for Secure Cloud Search Services

Attribute-Based Encryption with Efficient Keyword Search and User Revocation.

Secure and Efficient Attribute-Based Encryption with Keyword Search.

Keyword Search with Access Control over Encrypted Data in Cloud Computing

VMSE: Verifiable multi-keyword searchable encryption in multi-user setting supporting keywords updating

Towards Achieving Keyword Search over Dynamic Encrypted Cloud Data with Symmetric-Key Based Verification

Secure and Verifiable Multi-owner Ranked-Keyword Search in Cloud Computing.

Efficient Strong Privacy-Preserving Conjunctive Keyword Search Over Encrypted Cloud Data

An Efficient Key-Policy Attribute-Based Searchable Encryption In Prime-Order Groups