Abstract:Searchable symmetric encryption (SSE) is a widely popular cryptographic technique that supports the search functionality over encrypted data on the cloud. Despite the usefulness, however, most of existing SSE schemes leak the search pattern, from which an adversary is able to tell whether two queries are for the same keyword. In recent years, it has been shown that the search pattern leakage can be exploited to launch attacks to compromise the confidentiality of the client's queried keywords. In this paper, we present a new SSE scheme which enables the client to search encrypted cloud data without disclosing the search pattern. Our scheme uniquely bridges together the advanced cryptographic techniques of chameleon hashing and indistinguishability obfuscation. In our scheme, the secure search tokens for plaintext keywords are generated in a randomized manner, so it is infeasible to tell whether the underlying plaintext keywords are the same given two secure search tokens. In this way, our scheme well avoids using deterministic secure search tokens, which is the root cause of the search pattern leakage. We provide rigorous security proofs to justify the security strengths of our scheme. In addition, we also conduct extensive experiments to demonstrate the performance. Although our scheme for the time being is not immediately applicable due to the current inefficiency of indistinguishability obfuscation, we are aware that research endeavors on making indistinguishability obfuscation practical is actively ongoing and the practical efficiency improvement of indistinguishability obfuscation will directly lead to the applicability of our scheme. Our paper is a new attempt that pushes forward the research on SSE with concealed search pattern.

Response-Hiding and Volume-Hiding Verifiable Searchable Encryption with Conjunctive Keyword Search

Verifiable searchable symmetric encryption for conjunctive keyword queries in cloud storage

Passive Attacks Against Searchable Encryption.

Towards Efficient Verifiable Conjunctive Keyword Search For Large Encrypted Database

VKSE-MO: verifiable keyword search over encrypted data in multi-owner settings

Efficient Strong Privacy-Preserving Conjunctive Keyword Search Over Encrypted Cloud Data

Volume-Hiding Range Searchable Symmetric Encryption for Large-Scale Datasets

On the Security of Verifiable Searchable Encryption Schemes

Enabling Search over Encrypted Cloud Data with Concealed Search Pattern.

Verifiable Conjunctive Dynamic Searchable Symmetric Encryption with Forward and Backward Privacy

VMSE: Verifiable multi-keyword searchable encryption in multi-user setting supporting keywords updating

Multi-User Verifiable Searchable Symmetric Encryption for Cloud Storage

A novel verifiable chinese multi-keyword fuzzy rank searchable encryption scheme in cloud environments

Enabling Generic, Verifiable, and Secure Data Search in Cloud Services

Hiding Access-pattern is Not Enough! Veil: A Storage and Communication Efficient Volume-Hiding Algorithm

Achieving Searchable Encryption Scheme With Search Pattern Hidden

Privacy-preserving Conjunctive Keyword Search on Encrypted Data with Enhanced Fine-Grained Access Control

Interpreting and Mitigating Leakage-Abuse Attacks in Searchable Symmetric Encryption

Hiding the Access Pattern is Not Enough: Exploiting Search Pattern Leakage in Searchable Encryption

VMKDO: Verifiable multi-keyword search over encrypted cloud data for dynamic data-owner

A Multi-User Searchable Encryption Scheme with Keyword Authorization in a Cloud Storage