Abstract:Symmetric Searchable Encryption(SSE) is deemed to tackle the privacy issue as well as the operability and confidentiality in data outsourcing. However, most SSE schemes assume that the cloud is honest but curious. This assumption is not always applicable. And even if some schemes supported verification, integrity or freshness checking in a malicious cloud, but the performance and security functionalities are not fully exploited. In this paper, we propose an efficient SSE scheme based on B+-Tree and Counting Bloom Filter (CBF) which supports secure verification, dynamic updating, and multi-user queries. Comparing with the previous state of the arts, we design the new data structure CBF to support dynamic updating and boost verification. We also leverage the timestamp mechanism in the scheme to prevent the malicious cloud from launching a replay attack. The new designed CBF is like a front-engine to save user's cost for query and verification. And it can achieve more efficient query and verification with negligible false positive when there is no value matching the queried keyword. The CBF supports efficient dynamic updating by combining Bloom Filter with a one-dimensional array that provides the counting capability. Furthermore, we design the authenticator for CBF. We adopt B+-Tree for it is widely used in many database engines and file systems. We also give a brief security proof of our scheme. Then we provide a detailed performance analysis. Finally, we evaluate our scheme through comprehensive experiments. The results are consistent with our analysis and show that our scheme is secure, and more efficient compared with the previous schemes with the same functionalities. The average performance can be improved by about 20 percent for both the cloud servers and users when the missing rate of the searching keywords is 20 percent. And the higher the missing rate is, the more the performance can be improved.

SSE-CTC: Search over Encrypted Data with Owner-Enforced and Complete Time Constraints

Forward Private Multi-Client Searchable Encryption with Efficient Access Control in Cloud Storage

A Dynamic and Non-Interactive Boolean Searchable Symmetric Encryption in Multi-Client Setting

Multi-User Searchable Symmetric Encryption With Dynamic Updates For Cloud Computing

ESVSSE: Enabling Efficient, Secure, Verifiable Searchable Symmetric Encryption

Enabling Search over Encrypted Cloud Data with Concealed Search Pattern.

A Survey on Searchable Symmetric Encryption

Augmenting Encrypted Search: A Decentralized Service Realization with Enforced Execution

Secure Similarity Search over Encrypted Non-Uniform Datasets

Verifiable Searchable Symmetric Encryption from Indistinguishability Obfuscation.

Efficient Searchable Symmetric Encryption for Storing Multiple Source Data on Cloud

Secure Searchable Encryption: a Survey

Verifiable searchable symmetric encryption for conjunctive keyword queries in cloud storage

Multi-User Verifiable Searchable Symmetric Encryption for Cloud Storage

Efficient SSE with Forward ID-Privacy and Authentication in the Multi-Data-Owner Settings

Practical Backward-Secure Searchable Encryption from Symmetric Puncturable Encryption

Enabling Generic, Verifiable, and Secure Data Search in Cloud Services

MMDSSE: Multi-client and Multi-keyword Dynamic Searchable Symmetric Encryption for Cloud Storage

Efficient Strong Privacy-Preserving Conjunctive Keyword Search Over Encrypted Cloud Data

Dynamic Searchable Symmetric Encryption with Forward and Backward Privacy: A Survey

A fast and flexible attribute-based searchable encryption scheme supporting multi-search mechanism in cloud computing