Mediated and searchable encryption method

Abstract

The invention relates to a mediated and searchable encryption method. The method comprises the following steps: S1, system initialization; S2, keyword encryption; S3, data encryption; S4, user key generation; S5, search Trapdoor generation; S6, data searching; S7, data decryption; and S8, user revocation. The mediated and searchable encryption method provided by the invention has the advantages that online and offline encryption and mediated encryption can be achieved, the method is applicable to a mobile cloud computing environment, and user permissions can be revoked instantly.

Description

technical field [0001] The invention belongs to the fields of safe storage of data and information search, and relates to an arbitration searchable encryption method. Background technique [0002] With the rapid development and wide application of technologies such as big data, cloud computing, and the Internet of Things, massive data generated by a large number of users will be uploaded to the cloud server for storage or calculation, so as to solve the problem of local servers or personal computers and mobile terminals. Insufficient computing and storage resources of other devices. Among them, the Internet of Things technology enables more intelligent terminals to join the Internet, and more data is transmitted to the cloud. However, when user data is uploaded to a third-party server, the user loses direct control over the data, and most of the existing third-party servers are operated by commercial companies, so data security and privacy face great challenges, such as per...

AI Technical Summary

Problems solved by technology

Chinese patent CN103179114A proposes a method for fine-grained data access control in cloud storage, which realizes the revoking of user permissions, but does not consider outsourcing decryption; based on the attribute encryption mechanism, patents CN105592100A and CN104901942A provide effective privacy protection for big data methods, and all take into account outsourcing decryption and user revocation, but cannot implement search functions on encrypted data, and cannot achieve efficient user utilization

However, users need to use different encryption methods for data plaintext and keywords, which increases the calculation tasks of data owners; CN105897419A proposes a multi-user dynamic keyword searchable encryption method, but does not consider user revocation and data encryption; CN104780161A A multi-user based searchable encryption method in cloud storage is proposed, but without fine-grained control over users, and without consideration of data encryption

In addition, the author Wenhai Sun et al. proposed a searchable encryption mechanism based on attribute passwords in the document "Protecting your right: Attribute-based keyword search with fine-grained owner-enforced search authorization in the cloud", which supports user attribute revocation, but needs to be updated All legitimate user private keys and ciphertexts make the system less efficient

Images