Abstract:Cloud storage becomes the priority for storing and sharing data for enterprise users. Encrypting prior to uploading data to the cloud is the best way to protect business secrets, however, it hinders the convenient operations on plaintexts, such as searching over the cloud data. In addition, employees in an enterprise have multiple layer structures and a higher layer employee should have the privilege to monitor the lower layer employees' data to check if these users violate the regulation without letting the employees be aware of. Public key encryption with keyword search (PEKS) is a well-known cryptographic primitive suitable for secure cloud storage, which supports keyword search without decryption in public key encryption settings. Unfortunately, no existing PEKS scheme supports the monitoring function without authorization from the sender. To address this issue, we propose a variant of PEKS named Hierarchical Public Key Encryption with Keyword Search (HPEKS) and provide a semi-generic construction utilizing a public key tree (PKTree) and a PEKS scheme. To better suit for the enterprise secret data sharing, we build an advanced HPEKS scheme, named designated-tester decryptable hierarchical public key encryption with keyword search (dDHPEKS), which enjoys stronger security and integrates the public key and symmetric key encryptions. We prove our dDHPEKS scheme secure under the security definition in the random oracle model. Particularly, it satisfies the security against outside offline keyword guessing attacks and furthermore, enjoys the transparency property so that the sender does not need to know the internal hierarchy structure of an enterprise in order to share encrypted data to the enterprise. Theoretical evaluation and concrete experiments show that our dDHPEKS scheme has comparable running efficiency with existing PEKS schemes.

Privacy‐Enhanced Data Sharing Systems from Hierarchical ID‐Based Puncturable Functional Encryption with Inner Product Predicates

A General Framework to Design Secure Cloud Storage Protocol Using Homomorphic Encryption Scheme.

Privacy-Preserving Protocol for Data Stored in the Cloud

Hierarchical Attribute-Based Encryption and Scalable User Revocation for Sharing Data in Cloud Servers

P-MOD: Secure Privilege-Based Multilevel Organizational Data-Sharing in Cloud Computing

P2E: Privacy-preserving and Effective Cloud Data Sharing Service

A Secure Cloud Data Sharing Protocol for Enterprise Supporting Hierarchical Keyword Search

Reinforcing Privacy in Cloud Computing via Adaptively Secure Non-zero Inner Product Encryption and Anonymous Identity-based Revocation in Unbounded Setting

Mobile Access and Flexible Search over Encrypted Cloud Data in Heterogeneous Systems

Hierarchical ID-Based Searchable Encryption with Constant Size Ciphertext in Cloud

Identifier Discrimination: Realizing Selective-Id HIBE with Authorized Delegation and Dedicated Encryption Privacy

Fine-grained Document Sharing Using Attribute-Based Encryption in Cloud Servers

Secure and Flexible Data Sharing for Distributed Storage with Efficient Key Management

Flexible identity-based remote data integrity checking for cloud storage with privacy preserving property

Verifiable inner product computation on outsourced database for authenticated multi-user data sharing

Share Your Data Carefree: an Efficient, Scalable and Privacy-Preserving Data Sharing Service in Cloud Computing

Verifiable and Hybrid Attribute-Based Proxy Re-Encryption for Flexible Data Sharing in Cloud Storage

A Secure and Efficient Data Sharing Framework with Delegated Capabilities in Hybrid Cloud

Encrypted data processing with Homomorphic Re-Encryption

Efficient and Privacy-preserving Fog-assisted Health Data Sharing Scheme

Privacy-preserving Fine-grained Data Sharing with Dynamic Service for the Cloud-edge IoT