计算机工程与应用 ›› 2013, Vol. 49 ›› Issue (16): 97-102.

• 网络、通信、安全 • 上一篇    下一篇

一种安全的具有匿名性的可搜索加密方案

李  双   

  1. 北京工商大学 理学院,北京 100048
  • 出版日期:2013-08-15 发布日期:2013-08-15

Safe anonymous identity based public key encryption with keyword search

LI Shuang   

  1. School of Science, Beijing Technology and Business University, Beijing 100048, China
  • Online:2013-08-15 Published:2013-08-15

摘要: 2004年,Boneh等利用匿名的基于身份加密方案构造了一个公钥可搜索加密方案(PEKS),解决了特定环境下对加密数据进行检索的这一困难工作。已有的可搜索加密方案,都是实现对关键词信息的保护,其实一个真正安全的可搜索加密方案,在保证搜索能力的前提下,不仅要实现对关键词信息的保护,也要实现对消息查询方信息的保护。提出具有匿名性的基于身份可搜索方案(ANO-IBEKS)的构造算法,给出了方案在随机预言机模型下语义安全性的证明。该方案可以很好地解决大量数据交给第三方服务器存储(比如网络存储)的关键词密文查询问题,可以有效地保护查询关键词和查询者身份等敏感信息,无法追踪究竟是哪个用户查询了什么信息。

关键词: 可搜索加密, 匿名性, 双线性Diffie-Hellman问题, 安全性证明

Abstract: In 2004, Boneh using anonymous hierarchical identity-based encryption scheme constructed a public key searchable encryption scheme(Public Key Encryption with Keyword Search shorthand for PEKS), which was proposed to solve the difficult task of the encrypted data to be retrieved under certain circumstances. For the existing searchable encryption schemes, the only purpose is to protect the information of keyword. In fact, a genuine safety PEKS should provide not only the security of keywords but also the security of users. So that, on the basis of existing anonymous hierarchical identity-based encryption scheme(ANO-IBE), the scheme of Anonymous Identity Based Public Key Encryption with Keyword Search(ANO-IBEKS)is firstly proposed. The semantic security proof of ANO-IBEKS in the random oracle model is given. The program can provide the function of protecting both the information of keyword and identity of the users under the circumstance of a lot of data to the third party server storage(such as network storage). In this scheme, severs cannot track exactly which user queries relevant information.

Key words: Public Key Encryption with Keyword Search(PEKS), anonymity, Bilinear Diffie-Hellman(BDH), security proof