Abstract: Data query and data encryption technology in the cloud computing is a current research hot. Aiming at the problems of the existing schemes, this paper proposes an improved data query and encryption scheme. For data searching, an identification management?model is established firstly, and then an identity differentiating algorithm is proposed based on jurisdiction to achieve the optimal distribution between the system resources and the ID quantity. For data encrypting, we propose a calculative encrypting method named CES, which can support the fuzzy retrieval and the basic computing operation, moreover, this method also can effectively protect the privacy data for users. The simulation results show that, our scheme is effective, and the performance is better than the traditional methods in terms of the decrypting, storage and communication cost.

Key words: cloud computing, data query, identification management model, optimal distribution, calculative encryption, fuzzy retrieval

摘要： 云计算环境下的数据查找与加密技术是目前的研究热点。针对现有方案的不足，提出了一种改进的数据查找与加密方案。在数据查找方面，首先建立了身份管理模型，然后提出了基于权限的身份鉴别算法来实现从系统资源到身份数量之间的最优指派；在数据加密方面，提出了一种可计算加密方案CES，该方案能支持云数据的模糊检索和基本算术运算，有效地对用户的敏感数据进行隐私保护。仿真实验结果表明，方案是有效的，在加、解密性能以及存储与通信开销等方面要优于传统的方法。

关键词: 云计算, 数据查找, 身份管理模型, 最优指派, 可计算加密, 模糊检索