

FOLLOWUS
Department of Computer Engineering, Sardar Vallabhbhai National Institute of Technology, Surat 394000, India
Department of Computer Science and Engineering, Indian Institute of Technology, Jammu 180001, India
Mukti PADHYA, E-mail: mukti.padhya@yahoo.in
[ "Devesh C. JINWALA, E-mail: dcjinwala@gmail.com" ]
Received:28 March 2018,
Revised:2019-;8-12,
Published Online:29 October 2019,
Published:2019-12
Scan QR Code
Mukti PADHYA, Devesh C. JINWALA. MULKASE: a novel approach for key-aggregate searchable encryption for multi-owner data[J]. Frontiers of Information Technology & Electronic Engineering, 2019, 20(12): 1717-1748.
Mukti PADHYA, Devesh C. JINWALA. MULKASE: a novel approach for key-aggregate searchable encryption for multi-owner data[J]. Frontiers of Information Technology & Electronic Engineering, 2019, 20(12): 1717-1748. DOI: 10.1631/FITEE.1800192.
最新密钥聚合可搜索加密(KASE)尝试将搜索加密数据与支持数据所有者相结合,共享一个聚合的可搜索密钥;该密钥授权用户搜索数据。相应地,用户需提交一个单一聚合陷门至云端,在共享数据集上执行关键词搜索。然而,现有KASE方法不支持使用单一聚合陷门在由多个所有者共享的数据上搜索。因此,本文提出MULKASE方法,该方法允许用户使用单一陷门在由多用户拥有的不同数据记录上搜索。在MULKASE方法中,聚合密钥尺寸不依赖于数据所有者拥有的文档数量,即使外包密文数量超出预定限值,聚合密钥尺寸维持不变。安全性分析证实MULKASE方法对所选消息攻击和关键词攻击安全,亦证实该方法对交叉配对攻击安全,且提供查询隐私。理论和实验分析表明MULKASE方法性能优于现有KASE方法。文中还演示了MULKASE方法如何执行联合搜索。
Recent attempts at key-aggregate searchable encryption (KASE) combine the advantages of searching encrypted data with support for data owners to share an aggregate searchable key with a user delegating search rights to a set of data. A user
in turn
is required to submit only one single aggregate trapdoor to the cloud to perform a keyword search across the shared set of data. However
the existing KASE methods do not support searching through data that are shared by multiple owners using a single aggregate trapdoor. Therefore
we propose a MULKASE method that allows a user to search across different data records owned by multiple users using a single trapdoor. In MULKASE
the size of the aggregate key is independent of the number of documents held by a data owner. The size of an aggregate key remains constant even though the number of outsourced ciphertexts goes beyond the predefined limit. Security analysis proves that MULKASE is secure against chosen message attacks and chosen keyword attacks. In addition
the security analysis confirms that MULKASE is secure against cross-pairing attacks and provides query privacy. Theoretical and empirical analyses show that MULKASE performs better than the existing KASE methods. We also illustrate how MULKASE can carry out federated searches.
SG Akl , , , PD Taylor . . Cryptographic solution to a problem of access control in a hierarchy . . ACM Trans Comput Syst , , 1983 . . 1 ( ( 3 ): ): 239 - - 248 . . DOI: 10.1145/357369.357372 http://doi.org/10.1145/357369.357372 . .
D Arya , , , V Ha-Thuc , , , S Sinha . . Personalized federated search at LinkedIn . . Proc 24 th ACM Int Conf on Information and Knowledge Management , , 2015 . . p.1699 - - 1702 . . DOI: 10.1145/2806416.2806615 http://doi.org/10.1145/2806416.2806615 . .
MJ Atallah , , , M Blanton , , , N Fazio , , , 等 . . Dynamic and efficient key management for access hierarchies . . ACM Trans Inform Syst Secur , , 2009 . . 12 ( ( 3 ): ): Article 18 DOI: 10.1145/1455526.1455531 http://doi.org/10.1145/1455526.1455531 . .
G Ateniese , , , A de Santis , , , AL Ferrara , , , 等 . . Provablysecure time-bound hierarchical key assignment schemes . . Proc 13 th ACM Conf on Computer and Communications Security , , 2006 . . p.288 - - 297 . . DOI: 10.1145/1180405.1180441 http://doi.org/10.1145/1180405.1180441 . .
AS Banu . . Efficient data sharing in cloud medium with key aggregate cryptosystem . . Netw Commun Eng , , 2015 . . 7 ( ( 3 ): ): 118 - - 121 . . . .
F Bao , , , RH Deng , , , XH Ding , , , 等 . . Private query on encrypted data in multi-user settings . . Proc 4 th Int Conf on Information Security Practice and Experience , , 2008 . . p.71 - - 85 . . DOI: 10.1007/978-3-540-79104-1_6 http://doi.org/10.1007/978-3-540-79104-1_6 . .
J Bethencourt , , , A Sahai , , , B Waters . . Ciphertext-policy attribute-based encryption . . Proc Symp on Security and Privacy , , 2007 . . p.321 - - 334 . . DOI: 10.1109/SP.2007.11 http://doi.org/10.1109/SP.2007.11 . .
D Boneh , , , G di Crescenzo , , , R Ostrovsky , , , 等 . . Public key encryption with keyword search . . Int Conf on the Theory and Applications of Cryptographic Techniques , , 2004 . . p.506 - - 522 . . DOI: 10.1007/978-3-540-24676-3_30 http://doi.org/10.1007/978-3-540-24676-3_30 . .
SD Chame , , , A Kumar . . A noval approach key aggregate cryptosystem for resizable data sharing in cloud storage . . Int Res J Eng Technol , , 2015 . . 7 ( ( 2 ): ): 508 - - 512 . . . .
YC Chang , , , M Mitzenmacher . . Privacy preserving keyword searches on remote encrypted data . . Proc 3 rd Int Conf on Applied Cryptography and Network Security , , 2005 . . p.442 - - 455 . . DOI: 10.1007/11496137_30 http://doi.org/10.1007/11496137_30 . .
JH Cheon . . Security analysis of the strong DiffieHellman problem . . Proc 24 th Annual Int Conf on the Theory and Applications of Cryptographic Techniques , , 2006 . . p.1 - - 11 . . DOI: 10.1007/11761679_1 http://doi.org/10.1007/11761679_1 . .
L Cheung , , , C Newport . . Provably secure ciphertext policy ABE . . Proc 14 th ACM Conf on Computer and Communications Security , , 2007 . . p.456 - - 465 . . DOI: 10.1145/1315245.1315302 http://doi.org/10.1145/1315245.1315302 . .
CK Chu , , , SSM Chow , , , WG Tzeng , , , 等 . . Key-aggregate cryptosystem for scalable data sharing in cloud storage . . IEEE Trans Parall Distrib Syst , , 2014 . . 25 ( ( 2 ): ): 468 - - 477 . . DOI: 10.1109/TPDS.2013.112 http://doi.org/10.1109/TPDS.2013.112 . .
BJ Cui , , , ZL Liu , , , LY Wang . . Key-aggregate searchable encryption (KASE) for group data sharing via cloud storage . . IEEE Trans Comput , , 2016 . . 65 ( ( 8 ): ): 2374 - - 2385 . . DOI: 10.1109/TC.2015.2389959 http://doi.org/10.1109/TC.2015.2389959 . .
R Curtmola , , , J Garay , , , S Kamara , , , 等 . . Searchable symmetric encryption: improved definitions and efficient constructions . . J Comput Secur , , 2011 . . 19 ( ( 5 ): ): 895 - - 934 . . DOI: 10.3233/JCS-2011-0426 http://doi.org/10.3233/JCS-2011-0426 . .
J Daemen , , , V Rijmen . . The Design of Rijndael. AES—the Advanced Encryption Standard . . Springer Berlin Heidelberg , , 2001 . . .
H Dang , , , YL Chong , , , F Brun , , , 等 . . Practical and scalable sharing of encrypted data in cloud storage with key aggregation . . Proc 4 th ACM Workshop on Information Hiding and Multimedia Security , , 2016 . . p.69 - - 80 . . DOI: 10.1145/2909827.2930795 http://doi.org/10.1145/2909827.2930795 . .
V Daza , , , J Herranz , , , P Morillo , , , 等 . . Extensions of access structures and their cryptographic applications . . Appl Algebr Eng Commun Comput , , 2010 . . 21 ( ( 4 ): ): 257 - - 284 . . DOI: 10.1007/s00200-010-0125-1 http://doi.org/10.1007/s00200-010-0125-1 . .
A de Caro , , , V Iovino . . jPBC: Java pairing based cryptography . . Proc Symp on Computers and Communications , , 2011 . . p.850 - - 855 . . DOI: 10.1109/ISCC.2011.5983948 http://doi.org/10.1109/ISCC.2011.5983948 . .
F Diaz , , , M Lalmas , , , M Shokouhi . . From federated to aggregated search . . Proc 33 rd Int ACM SIGIR Conf on Research and Development in Information Retrieval , , 2010 . . p.910 DOI: 10.1145/1835449.1835682 http://doi.org/10.1145/1835449.1835682 . .
Y Dodis , , , N Fazio . . Public key broadcast encryption for stateless receivers . . ACM CCS-9 Workshop on Digital Rights Management , , 2003 . . p.61 - - 80 . . DOI: 10.1007/97835404499355 http://doi.org/10.1007/97835404499355 . .
A Fiat , , , M Naor . . Broadcast encryption . . Proc 13 th Annual Int Cryptology Conf on Advances in Cryptology , , 1993 . . p.480 - - 491 . . DOI: 10.1007/3-540-48329-2_40 http://doi.org/10.1007/3-540-48329-2_40 . .
HF Firdose , , , RDC Rebekah . . A key aggregate construction with adaptable offering of information in cloud . . Int J Comput Eng Res Trends , , 2015 . . 2 ( ( 5 ): ): 355 - - 358 . . . .
EJ Goh . . Secure Indexes . . Cryptology ePrint Archive, Report 2003/216 , , 2003 . . https://eprint.iacr.org/2003/216 https://eprint.iacr.org/2003/216 , , . .
V Goyal , , , O Pandey , , , A Sahai , , , 等 . . Attribute-based encryption for fine-grained access control of encrypted data . . Proc 13 th ACM Conf on Computer and Communications Security , , 2006 . . p.89 - - 98 . . DOI: 10.1145/1180405.1180418 http://doi.org/10.1145/1180405.1180418 . .
C Guo , , , NQ Luo , , , ZA Bhuiyan , , , 等 . . Key-aggregate authentication cryptosystem for data sharing in dynamic cloud storage . . Proc 14 th Int Symp on Pervasive Systems, Algorithms and Networks & 11 th Int Conf on Frontier of Computer Science and Technology & 3 rd Int Symp of Creative Computing , , 2017 . . p.242 - - 249 . . DOI: 10.1109/ISPAN-FCST-ISCC.2017.43 http://doi.org/10.1109/ISPAN-FCST-ISCC.2017.43 . .
HP Huang , , , JP Du , , , H Wang , , , 等 . . A multi-keyword multi-user searchable encryption scheme based on cloud storage . . Proc IEEE Trustcom/BigDataSE/ISPA , , 2016 . . p.1937 - - 1943 . . DOI: 10.1109/trustcom.2016.0296 http://doi.org/10.1109/trustcom.2016.0296 . .
YH Hwang , , , PJ Lee . . Public key encryption with conjunctive keyword search and its extension to a multiuser system . . Proc 1 st Int Conf on Pairing-Based Cryptography , , 2007 . . p.2 - - 22 . . DOI: 10.1007/978-3-540-73489-5_2 http://doi.org/10.1007/978-3-540-73489-5_2 . .
A Kiayias , , , O Oksuz , , , A Russell , , , 等 . . Efficient encrypted keyword search for multi-user data sharing . . Proc 21 st European Symp on Research in Computer Security , , 2016 . . p.173 - - 195 . . DOI: 10.1007/978-3-319-45744-4_9 http://doi.org/10.1007/978-3-319-45744-4_9 . .
K Kurosawa , , , T Yoshida , , , Y Desmelt . . Inherently large traceability of broadcast encryption scheme . . Proc IEEE Int Symp on Information Theory , , 2000 . . p.464 DOI: 10.1109/isit.2000.866762 http://doi.org/10.1109/isit.2000.866762 . .
S Lambhate , , , S Patil . . A survey on cloud group data sharing using key-aggregate searchable encryption (KASE) scheme . . Int J Sci Res Sci Eng Technol , , 2016 . . 2 ( ( 1 ): ): 182 - - 185 . . . .
T Li , , , ZL Liu , , , P Li , , , 等 . . Verifiable searchable encryption with aggregate keys for data sharing in outsourcing storage . . Proc 21 st Australasian Conf on Information Security and Privacy , , 2016 . . p.153 - - 169 . . DOI: 10.1007/978-3-319-40367-0_10 http://doi.org/10.1007/978-3-319-40367-0_10 . .
T Li , , , ZL Liu , , , CF Jia , , , 等 . . Key-aggregate searchable encryption under multi-owner setting for group data sharing in the cloud . . Int J Web Grid Serv , , 2018 . . 14 ( ( 1 ): ): 21 - - 43 . . DOI: 10.1504/IJWGS.2018.088358 http://doi.org/10.1504/IJWGS.2018.088358 . .
ZH Liao , , , JM Wang , , , B Lang . . Ciphertext-policy hidden vector encryption for multi-user keyword search . . Proc 3 rd Int Conf on Internet & Cloud Computing Technology , , 2013 . . .
RV Mahalle , , , PP Pawade . . A review of secure data sharing in cloud using key aggregate cryptosystem and decoy technology . . Int J Sci Res , , 2014 . . 3 ( ( 12 ): ): 2694 - - 2697 . . . .
P Massonet , , , A Levin , , , A Celesti , , , 等 . . Security requirements in a federated cloud networking architecture . . Workshops of ESOCC Advances in Service-Oriented and Cloud Computing , , 2015 . . p.79 - - 88 . . DOI: 10.1007/978-3-319-33313-7_6 http://doi.org/10.1007/978-3-319-33313-7_6 . .
M Padhya , , , D Jinwala . . A novel approach for searchable CP-ABE with hidden ciphertext-policy . . Proc 10 th Int Conf on Information Systems Security , , 2014 . . p.167 - - 184 . . DOI: 10.1007/978-3-319-13841-1_10 http://doi.org/10.1007/978-3-319-13841-1_10 . .
N Pansare , , , A Somkuwar , , , A Shaikh , , , 等 . . Keyaggregate searchable encryption (KASE) for user revocation in cloud storage . . Int J Eng Tech , , 2016 . . 2 ( ( 1 ): ): 68 - - 70 . . . .
JH Park , , , DH Lee . . A new public key broadcast encryption using Boneh-Boyen-Goh's HIBE scheme . . Proc 4 th Int Conf on Information Security Practice and Experience , , 2008 . . p.101 - - 115 . . DOI: 10.1007/978-3-540-79104-1_8 http://doi.org/10.1007/978-3-540-79104-1_8 . .
S Patranabis , , , Y Shrivastava , , , D Mukhopadhyay . . Dynamic key-aggregate cryptosystem on elliptic curves for online data sharing . . Proc 16 th Int Conf in Cryptology in India Progress in Cryptology , , 2015 . . p.25 - - 44 . . DOI: 10.1007/978-3-319-26617-6_2 http://doi.org/10.1007/978-3-319-26617-6_2 . .
S Patranabis , , , Y Shrivastava , , , D Mukhopadhyay . . Provably secure key-aggregate cryptosystems with broadcast aggregate keys for online data sharing on the cloud . . IEEE Trans Comput , , 2017 . . 66 ( ( 5 ): ): 891 - - 904 . . DOI: 10.1109/TC.2016.2629510 http://doi.org/10.1109/TC.2016.2629510 . .
PS Pawar , , , A Sajjad , , , T Dimitrakos , , , 等 . . Securityas-a-service in multi-cloud and federated cloud environments . . Proc 9 th IFIP Int Conf on Trust Management , , 2015 . . p.251 - - 261 . . DOI: 10.1007/978-3-319-18491-3_21 http://doi.org/10.1007/978-3-319-18491-3_21 . .
M Pirretti , , , P Traynor , , , P McDaniel , , , 等 . . Secure attribute-based systems . . J Comput Secur , , 2010 . . 18 ( ( 5 ): ): 799 - - 837 . . . .
RA Popa , , , N Zeldovich . . Multi-key Searchable Encryption . . Cryptology ePrint Archive, Report 2013/508. , , 2013 . . https://eprint.iacr.org/2013/508 https://eprint.iacr.org/2013/508 , , . .
H Ragab-Hassen . . Efficient key management model and scheme for content access control in hierarchies . . Proc IEEE Globecom Workshop , , 2010 . . p.1492 - - 1496 . . DOI: 10.1109/glocomw.2010.5700187 http://doi.org/10.1109/glocomw.2010.5700187 . .
RL Rivest , , , A Shamir , , , L Adleman . . A method for obtaining digital signatures and public-key cryptosystems . . Commun ACM , , 1978 . . 21 ( ( 2 ): ): 120 - - 126 . . DOI: 10.1145/359340.359342 http://doi.org/10.1145/359340.359342 . .
Y Rouselakis , , , B Waters . . Efficient statically-secure large-universe multi-authority attribute-based encryption . . Proc 19 th Int Conf on Financial Cryptography and Data Security , , 2015 . . p.315 - - 332 . . DOI: 10.1007/978-3-662-47854-7_19 http://doi.org/10.1007/978-3-662-47854-7_19 . .
A Sahai , , , B Waters . . Fuzzy identity-based encryption . . Proc 24 th Annual Int Conf on the Theory and Applications of Cryptographic Techniques Advances in Cryptology , , 2005 . . p.457 - - 473 . . DOI: 10.1007/11426639_27 http://doi.org/10.1007/11426639_27 . .
KA Shim . . CPAS: an efficient conditional privacypreserving authentication scheme for vehicular sensor networks . . IEEE Trans Veh Technol , , 2012 . . 61 ( ( 4 ): ): 1874 - - 1883 . . DOI: 10.1109/TVT.2012.2186992 http://doi.org/10.1109/TVT.2012.2186992 . .
A Singhal . . Modern information retrieval: a brief overview . . IEEE Data Eng Bull , , 2001 . . 24 ( ( 4 ): ): 35 - - 43 . . . .
A Sinha , , , CV Kale , , , JL Douglas , , , 等 . . Federated Search . . US Patent App. 14/503, 138 , , 2015 . . .
DX Song , , , D Wagner , , , A Perrig . . Practical techniques for searches on encrypted data . . Proc IEEE Symp on Security and Privacy , , 2000 . . p.44 - - 55 . . DOI: 10.1109/SECPRI.2000.848445 http://doi.org/10.1109/SECPRI.2000.848445 . .
B Soubhagya , , , VG Mini , , , JA Celin . . A homomorphic encryption technique for scalable and secure sharing of personal health record in cloud computing . . Int J Comput Appl , , 2013 . . 67 ( ( 11 ): ): 40 - - 44 . . DOI: 10.5120/11443-7344 http://doi.org/10.5120/11443-7344 . .
MR Sumalatha , , , MBR Begam , , , ED Priya , , , 等 . . Secure data sharing using aggregate key for sensitive data . . Int Res J Eng Technol , , 2015 . . 2 ( ( 4 ): ): 40 - - 45 . . . .
WH Sun , , , SC Yu , , , WJ Lou , , , 等 . . Protecting your right: attribute-based keyword search with fine-grained owner-enforced search authorization in the cloud . . Proc IEEE Conf on Computer Communications , , 2014 . . p.226 - - 234 . . DOI: 10.1109/INFOCOM.2014.6847943 http://doi.org/10.1109/INFOCOM.2014.6847943 . .
CJ Wang , , , WT Li , , , Y Li , , , 等 . . A ciphertext-policy attribute-based encryption scheme supporting keyword search function . . Proc 5 th Int Symp on Cyberspace Safety and Security , , 2013 . . p.377 - - 386 . . DOI: 10.1007/978-3-319-03584-0_28 http://doi.org/10.1007/978-3-319-03584-0_28 . .
PS Wang , , , HX Wang , , , J Pieprzyk . . Common secure index for conjunctive keyword-based retrieval over encrypted data . . Proc 4 th VLDB Workshop on Secure Data Management , , 2007 . . p.108 - - 123 . . DOI: 10.1007/978-3-540-75248-6_8 http://doi.org/10.1007/978-3-540-75248-6_8 . .
PS Wang , , , HX Wang , , , J Pieprzyk . . Keyword fieldfree conjunctive keyword searches on encrypted data and extension for dynamic groups . . In: Franklin MK, Hui LCK, Wong DS (Eds.), Cryptology and Network Security. Springer Berlin Heidelberg , , 2008a . . p.178 - - 195 . . DOI: 10.1007/978-3-540-89641-8_13 http://doi.org/10.1007/978-3-540-89641-8_13 . .
PS Wang , , , HX Wang , , , J Pieprzyk . . Threshold privacy preserving keyword searches . . Proc Int Conf on Current Trends in Theory and Practice of Computer Science , , 2008b . . p.646 - - 658 . . DOI: 10.1007/978-3-540-77566-9_56 http://doi.org/10.1007/978-3-540-77566-9_56 . .
ZW Wang . . Provably secure key-aggregate cryptosystems with auxiliary inputs for data sharing on the cloud . . Fut Gener Comput Syst , , 2019 . . 93 770 - - 776 . . DOI: 10.1016/j.future.2017.09.041 http://doi.org/10.1016/j.future.2017.09.041 . .
ZW Wang , , , LY Zhou . . Leakage-resilient key-aggregate cryptosystem with auxiliary input . . Proc 25 th Int Conf on Computer Communication and Networks , , 2016 . . p.1 - - 5 . . DOI: 10.1109/ICCCN.2016.7568536 http://doi.org/10.1109/ICCCN.2016.7568536 . .
ZW Wang , , , C Cao , , , NH Yang , , , 等 . . ABE with improved auxiliary input for big data security . . J Comput Syst Sci , , 2017 . . 89 41 - - 50 . . DOI: 10.1016/j.jcss.2016.12.006 http://doi.org/10.1016/j.jcss.2016.12.006 . .
B Waters . . Ciphertext-policy attribute-based encryption: an expressive, efficient, and provably secure realization. In: Catalano D, Fazio N, Gennaro R, et al. (Eds.), Public Key Cryptography-PKC 2011 . . Springer Berlin Heidelberg , , 2011 . . p.53 - - 70 . . DOI: 10.1007/978-3-642-19379-8_4 http://doi.org/10.1007/978-3-642-19379-8_4 . .
AP Xiong , , , QX Gan , , , XX He , , , 等 . . A searchable encryption of CP-ABE scheme in cloud storage . . Proc 10 th Int Computer Conf on Wavelet Active Media Technology and Information Processing , , 2013 . . p.345 - - 349 . . DOI: 10.1109/ICCWAMTIP.2013.6716664 http://doi.org/10.1109/ICCWAMTIP.2013.6716664 . .
ZQ Yang , , , S Zhong , , , RN Wright . . Privacy-preserving queries on encrypted data . . European Symp on Research in Computer Security , , 2006 . . p.479 - - 495 . . DOI: 10.1007/11863908_29 http://doi.org/10.1007/11863908_29 . .
DF Yao , , , N Fazio , , , Y Dodis , , , 等 . . ID-based encryption for complex hierarchies with applications to forward security and broadcast encryption . . Proc 11 th ACM Conf on Computer and Communications Security , , 2004 . . p.354 - - 363 . . DOI: 10.1145/1030083.1030130 http://doi.org/10.1145/1030083.1030130 . .
LH Zhang , , , WH Yang , , , LZ Liao . . On an efficient implementation of the face algorithm for linear programming . . J Comput Math , , 2013 . . 31 ( ( 4 ): ): 335 - - 354 . . . .
R Zhou , , , XS Zhang , , , XJ Du , , , 等 . . File-centric multi-key aggregate keyword searchable encryption for industrial Internet of Things . . IEEE Trans Ind Inform , , 2018 . . 14 ( ( 8 ): ): 3648 - - 3658 . . DOI: 10.1109/TII.2018.2794442 http://doi.org/10.1109/TII.2018.2794442 . .
Publicity Resources
Related Articles
Related Author
Related Institution
京公网安备11010802024621