Abstract:Symmetric Searchable Encryption(SSE) is deemed to tackle the privacy issue as well as the operability and confidentiality in data outsourcing. However, most SSE schemes assume that the cloud is honest but curious. This assumption is not always applicable. And even if some schemes supported verification, integrity or freshness checking in a malicious cloud, but the performance and security functionalities are not fully exploited. In this paper, we propose an efficient SSE scheme based on B+-Tree and Counting Bloom Filter (CBF) which supports secure verification, dynamic updating, and multi-user queries. Comparing with the previous state of the arts, we design the new data structure CBF to support dynamic updating and boost verification. We also leverage the timestamp mechanism in the scheme to prevent the malicious cloud from launching a replay attack. The new designed CBF is like a front-engine to save user's cost for query and verification. And it can achieve more efficient query and verification with negligible false positive when there is no value matching the queried keyword. The CBF supports efficient dynamic updating by combining Bloom Filter with a one-dimensional array that provides the counting capability. Furthermore, we design the authenticator for CBF. We adopt B+-Tree for it is widely used in many database engines and file systems. We also give a brief security proof of our scheme. Then we provide a detailed performance analysis. Finally, we evaluate our scheme through comprehensive experiments. The results are consistent with our analysis and show that our scheme is secure, and more efficient compared with the previous schemes with the same functionalities. The average performance can be improved by about 20 percent for both the cloud servers and users when the missing rate of the searching keywords is 20 percent. And the higher the missing rate is, the more the performance can be improved.

Efficient Verifiable Dynamic Searchable Symmetric Encryption with Forward and Backward Security

Towards Efficient Verifiable Forward Secure Searchable Symmetric Encryption

Secure Dynamic Searchable Symmetric Encryption With Constant Client Storage Cost

Verifiable dynamic ranked search with forward privacy over encrypted cloud data

Dynamic Searchable Symmetric Encryption With Strong Security and Robustness

Forward and Backward-Secure Range-Searchable Symmetric Encryption

ESVSSE: Enabling Efficient, Secure, Verifiable Searchable Symmetric Encryption

A provably lightweight and secure DSSE scheme, with a constant storage cost for a smart device client

Dynamic Searchable Symmetric Encryption Schemes Supporting Range Queries with Forward/Backward Privacy

Towards Achieving Keyword Search over Dynamic Encrypted Cloud Data with Symmetric-Key Based Verification

Verifiable searchable symmetric encryption for conjunctive keyword queries in cloud storage

Non-interactive Multi-client Searchable Symmetric Encryption with Small Client Storage

Enabling Generic, Verifiable, and Secure Data Search in Cloud Services

Efficient Dynamic Searchable Encryption with Forward Privacy

ROSE: Robust Searchable Encryption With Forward and Backward Security

Forward Private Multi-Client Searchable Encryption with Efficient Access Control in Cloud Storage

MFPSE: Multi-user Forward Private Searchable Encryption with dynamic authorization in cloud computing

Multi-User Verifiable Searchable Symmetric Encryption for Cloud Storage

Accelerating Forward and Backward Private Searchable Encryption Using Trusted Execution

Towards efficient verifiable multi-keyword search over encrypted data based on blockchain

Forward and Backward Private Searchable Encryption for Cloud-Assisted Industrial IoT