CD-ABSE: Attribute-Based Searchable Encryption Scheme Supporting Cross-Domain Sharing on Blockchain

Abstract

The network security situation is grim, and the problem of “information isolated island” is becoming increasingly prominent. In view of the low efficiency and insufficient security of data cross-domain sharing in the open network environment, a searchable data sharing scheme supporting cross-domain is proposed based on attribute encryption technology. Firstly, different types of nodes on the blockchain are used to realize the data sharing of users in different domains. Secondly, the flexible ciphertext-search function is realized through the search form of keyword strategy. Moreover, the scheme adopts the mode of storage under the chain, which reduces the operation pressure of the blockchain. At the same time, according to the characteristics of the blockchain, the traceability and tamper-proof of the access process can be realized. Finally, the analysis shows that the scheme can resist quantum attack and collusive attack while avoiding complex bilinear operation and meet the security of trapdoor search and indistinguishability under chosen-plaintext attack. Compared with other searchable attribute-based encryption schemes, the scheme has certain advantages in function and performance.

Blockchain-assisted multi-authority searchable encryption scheme in cloud environment

“…In addition to addressing the issue of limited blockchain storage, their scheme also addresses the issue of partially honest search on cloud storage servers. Guo et al [16] provided an attribute-encrypted data sharing scheme that enables cross-domain search, and in order to enable data sharing for users in other domains, they made use of several kinds of nodes on the blockchain. Off-chain storage is used as part of the solution to lessen the workload placed on the blockchain.…”

Applying Access Control Enabled Blockchain (ACE-BC) Framework to Manage Data Security in the CIS System

“…Symmetric encryption requires the data owner and users to either share the same key or agree on a shared key to decrypt the information [ 17 ]. Data owners cannot predict which user accesses their information; sensitive data must first be encrypted by utilizing a key that is only known to the data owner and then re-encrypted by utilizing a key known only to the data users [ 18 ]. A data owner must be online constantly to use this decrypt-and-encrypt system, which is problematic when there are more data elements and more types of data owners and consumers; thus, the issue’s complexity increases [ 19 ].…”