Abstract:Cloud storage becomes the priority for storing and sharing data for enterprise users. Encrypting prior to uploading data to the cloud is the best way to protect business secrets, however, it hinders the convenient operations on plaintexts, such as searching over the cloud data. In addition, employees in an enterprise have multiple layer structures and a higher layer employee should have the privilege to monitor the lower layer employees' data to check if these users violate the regulation without letting the employees be aware of. Public key encryption with keyword search (PEKS) is a well-known cryptographic primitive suitable for secure cloud storage, which supports keyword search without decryption in public key encryption settings. Unfortunately, no existing PEKS scheme supports the monitoring function without authorization from the sender. To address this issue, we propose a variant of PEKS named Hierarchical Public Key Encryption with Keyword Search (HPEKS) and provide a semi-generic construction utilizing a public key tree (PKTree) and a PEKS scheme. To better suit for the enterprise secret data sharing, we build an advanced HPEKS scheme, named designated-tester decryptable hierarchical public key encryption with keyword search (dDHPEKS), which enjoys stronger security and integrates the public key and symmetric key encryptions. We prove our dDHPEKS scheme secure under the security definition in the random oracle model. Particularly, it satisfies the security against outside offline keyword guessing attacks and furthermore, enjoys the transparency property so that the sender does not need to know the internal hierarchy structure of an enterprise in order to share encrypted data to the enterprise. Theoretical evaluation and concrete experiments show that our dDHPEKS scheme has comparable running efficiency with existing PEKS schemes.

Designated server proxy re-encryption with boolean keyword search for E-Health Clouds

Public Key Encryption with Keyword Search in Cloud: A Survey

Dual-Server Boolean Data Retrieval for Highly-Scalable Secure File Sharing Services

Searchable Encryption with Autonomous Path Delegation Function and Its Application in Healthcare Cloud

A Limited Proxy Re-encryption with Keyword Search for Data Access Control in Cloud Computing.

A Secure Cloud Data Sharing Protocol for Enterprise Supporting Hierarchical Keyword Search

A Restricted Proxy Re‐encryption with Keyword Search for Fine‐grained Data Access Control in Cloud Storage

Proxy Re-encryption with Keyword Search from Anonymous Conditional Proxy Re-encryption

Enabling Secure and Efficient Ranked Keyword Search over Outsourced Cloud Data

Multi-Keyword Searchable Identity-Based Proxy Re-Encryption from Lattices

Fuzzy Keyword Search over Encrypted Cloud Data with Dynamic Fine-grained Access Control.

Multi-user search on the encrypted multimedia database: lattice-based searchable encryption scheme with time-controlled proxy re-encryption

Blockchain-enabled one-to-many searchable encryption supporting designated server and multi-keywords for Cloud-IoMT

An ElGamal Encryption with Fuzzy Keyword Search on Cloud Environment.

Dynamic access policy in cloud-based personal health record (PHR) systems

Enabling Personalized Search over Encrypted Outsourced Data with Efficiency Improvement

Efficient Privacy-Preservation Multi-factor Ranking with Approximate Search over Encrypted Big Cloud Data.

A Privacy Enhanced Search Approach For Cloud-Based Medical Data Sharing

Preferred Keyword Search over Encrypted Data in Cloud Computing.

PPSEB: A Postquantum Public-Key Searchable Encryption Scheme on Blockchain for E-Healthcare Scenarios

Specified keywords search scheme for EHR sharing