Abstract:Secure cloud search service allows resource-constrained clients to effectively search over encrypted cloud storage. Towards enabling owner-enforced search authorization, the notion of attribute-based keyword search (ABKS) has been introduced and widely deployed in practice. To enhance traditional security of ABKS, two state-of-the-art solutions are presented to address keyword guessing attacks or setup inconsistency for secret key. Nevertheless, they have not simultaneously considered the following threats to a data user: (i) inconsistent secret key/cipher-index caused by outside dishonest authority and/or data owner; (ii) algorithm substitution attacks (ASA) launched by inside adversarial eavesdropping. These attacks may unfortunately lead to cloud data breach and user information exposure. To tackle such outside and inside threats, we introduce subversion-resistance and consistency for secure and fine-grained cloud document search services. In particular, we propose a consistent ABKS system with cryptographic reverse firewalls (CRF). Technically, we refer to verifiable functional encryption and employ non-interactive zero-knowledge proofs of discrete logarithm equality to ensure strong input consistency for ABKS. In addition, we build a trusted CRF zone for sanitizing algorithm outputs against ASA attacks. Moreover, we formalize the security model and formally prove security of our system. To clarify practical performance, we implement state-of-the-art solutions and our system in real cloud environment based on Enron dataset. The results show that our system achieves more enhanced security properties without obviously sacrificing performance. In particular, our system achieves comparable time and storage cost for document-index encryption and document search, as compared to state-of-the-art solutions.

Achieving forward unforgeability in keyword-field-free conjunctive search

Privacy-Preserving and Forward Public Key Encryption with Field-Free Multi-Keyword Search for Cloud Encrypted Data

Toward Forward Secure SSE Supporting Conjunctive Keyword Search

Privacy-preserving Conjunctive Keyword Search on Encrypted Data with Enhanced Fine-Grained Access Control

Forward Secure Public-key Authenticated Encryption with Conjunctive Keyword Search

Efficient Strong Privacy-Preserving Conjunctive Keyword Search Over Encrypted Cloud Data

Searchable Encryption with Conjunctive Field Free Keyword Search Scheme

An efficient multi-user multi-keyword fuzzy search scheme over encrypted cloud storage

Toward Efficient Multi-Keyword Fuzzy Search over Encrypted Outsourced Data with Accuracy Improvement

Verifiable Conjunctive Dynamic Searchable Symmetric Encryption with Forward and Backward Privacy

PUBLIC KEY ENCRYPTION WITH CONJUNCTIVE FIELD FREE KEYWORD SEARCH SCHEME

Subversion-Resistant and Consistent Attribute-Based Keyword Search for Secure Cloud Storage

Fuzzy Keyword Search over Encrypted Data in Cloud Computing.

EliMFS: Achieving Efficient, Leakage-Resilient, and Multi-Keyword Fuzzy Search on Encrypted Cloud Data

A secure index resisting keyword privacy leakage from access and search patterns in searchable encryption

Fuzzy Keyword Search over Encrypted Cloud Data with Dynamic Fine-grained Access Control.

A novel verifiable chinese multi-keyword fuzzy rank searchable encryption scheme in cloud environments

FBPB-SE: A Forward and Backward Private Blockchain-based Searchable Encryption with Fuzzy Multi-keyword.

On the Security of Verifiable Searchable Encryption Schemes

FS-PEKS: Lattice-Based Forward Secure Public-Key Encryption with Keyword Search for Cloud-Assisted Industrial Internet of Things

Privacy preserving search services against online attack