Verifiable and Multi-Keyword Searchable Attribute-Based Encryption Scheme for Cloud Storage

Abstract

In attribute-based searchable encryption (ABSE) scheme, data owners can encrypt their data with access policy for security consideration, and encrypt keywords to obtain keyword index for privacy keyword search, and data users can search interesting keyword on keyword indexes by keyword search trapdoor. However, many existing searchable encryption schemes only support single keyword search and most of the existing attribute-based encryption (ABE) schemes have high computational costs at user client. These problems significantly limit the application of attribute-based searchable encryption schemes in practice. In this paper, we propose a verifiable and multi-keyword searchable attribute-based encryption (VMKS-ABE) scheme for cloud storage, in our new scheme, multi-keyword can be searched and the search privacy is protected. That is, the cloud server can search the multi-keyword with keyword search trapdoor but it does not know any information about the keywords searched. In the proposed scheme, many computing tasks are outsourced to the cloud proxy server, which greatly reduces the computing burden at the user client. Besides, the scheme also supports the verification of the correctness of the outsourced private key. The proposed scheme is proved secure that the keyword index is indistinguishable under the adaptive keyword attacks in the general group model, and the ciphertext is selective secure under selective plaintext attacks in the random oracle model. The security and experimental results show that our scheme is suitable for practicability. INDEX TERMS Attribute-based encryption, verifiable outsourcing, multi-keyword search, adaptive security.

Lightweight and fine‐grained access control for cloud–fog‐based electronic medical record sharing systems

“…By combining the advantages of encryption and digital signature, Liu et al 12 proposed ciphertext‐policy attribute‐based signcryption to achieve data security and identity anonymity and collusion resistance for cloud environment. In Wang et al, 17 attribute‐based encryption is combined with the verifiability of outsourced private key and multi‐keyword search to realize privacy preservation and secure multi‐keyword search.…”

“…Although they purse similar security goals for data sharing, the works of Wang et al 17 and Ameri et al 22 and the proposed scheme establish system models with minor differences. In order to compare them on the same benchmark, we have the following settings: In Wang et al, 17 the entities AA and OKGSP take the same role as the TTP in our proposed scheme.…”

“…Although they purse similar security goals for data sharing, the works of Wang et al 17 and Ameri et al 22 and the proposed scheme establish system models with minor differences. In order to compare them on the same benchmark, we have the following settings: In Wang et al, 17 the entities AA and OKGSP take the same role as the TTP in our proposed scheme. The CPS of Wang et al 17 and the cloud of Ameri et al 22 perform the same functions with fog of the proposed scheme. The algorithms in Wang et al 17 are defined in multiplicative cyclic groups.…”

R-PEKS: RBAC Enabled PEKS for Secure Access of Cloud Data

“…Integrating such a model with SE increases the complexity of the key management when the user accesses a large number of files. Recently, in [17]- [20], an attribute based SE scheme was implemented which result in huge computational cost because of the security assumption, which is based on BDH (Bi-linear Diffie-Hellman) assumption due to the usage of bi-linear mapping. Further, in [2], [9], [10], finegrained access control and multi-field search query were implemented in SE with ABAC during file access in the cloud.…”

TABE-DAC: Efficient Traceable Attribute-Based Encryption Scheme With Dynamic Access Control Based on Blockchain

“…One of the issues is that the high computation requirements of a CP-ABE scheme [6], [7], which directly affects the performance of realizing fine-grained sharing of private data in blockchain. Some previous works [8]- [12] attempted to reduce the computation burden of users' systems by outsourcing certain computations in CP-ABE schemes to cloud. Also, since the attribute-based encryption scheme realizes one-to-many encryption, the key contains only the attributes information of data users rather than information related to a specific user's identity.…”