The invention discloses a verifiable searchable
encryption method. The verifiable searchable
encryption method comprises the steps that: U1, a
client calculates a
reverse index according to a file set, and calculates a set of key value pairs for each keyword in the
reverse index; each set of key value pairs is inserted into an MPT
tree structure; and the root hash of the MPT
tree structure is calculated and stored; U2, the
client uploads an initialized MPT tree to a
server, and uploads updated key value pairs to the
server when the file set is updated; U3, the
client sends a challenge token tothe
server, and receives a searching result and reference information used for
verification returned by the server; U4, the client matches the sent challenge token with the reference information, andreconstructs the root hash of the MPT
tree structure according to a matching result; and U5, the reconstructed root hash is compared with the root hash stored by the client. According to the searchable
encryption method disclosed by the invention, the freshness
attack and the integrity
attack due to the fact that the server is dishonest can be verified at the same time; the application range is relatively wide; and the overhead is low.