Order-preserving encryption method with low adjustment rate for cloud computing environment

Abstract

The invention discloses an order-preserving encryption method with a low adjustment rate for a cloud computing environment. The method mainly comprises the steps of searching for a data insertion path and inserting encrypted data; judging whether a new binary tree is balanced or not; locating the balanced binary tree and storing node information; establishing a resorted binary tree; and adjusting the binary tree to be balanced and updating heights and codes of unbalanced nodes. According to the method, an original sequence relationship of the data can be reserved while the data is encrypted; and ciphertext data in a ciphertext database is supported to be directly subjected to operations of sequencing, size comparison and the like. gmOPE (generalized mutable order-preserving encoding) is proposed; a generalized balanced binary search tree encoding-based order-preserving encryption mode is realized; any data type is supported; and any plaintext information except a sequence is not leaked. A user can define an insertion adjustment policy, so that the additional overhead caused by interaction between the user and the database, and code change is reduced and the efficiency of database addition / deletion operation is improved.

Description

technical field [0001] The invention relates to a method for performing sequence-preserving encryption on stored data in a cloud computing environment, and belongs to the technical field of information security. Background technique [0002] With the continuous development of cloud computing technology, a large amount of user data is uploaded and stored in the cloud database. While effectively utilizing these data, ensuring the security of user privacy information has become one of the research hotspots of encryption algorithms. Although the traditional data encryption scheme can effectively reduce the leakage of confidential information stored on the untrusted server side, because it cannot directly operate on the ciphertext, it is necessary to decrypt the ciphertext on the client side before performing relevant calculations, which wastes cloud computing. Computing capabilities of the platform. A feasible solution is to combine the OPE (Order-Preserving Encryption) scheme ...

AI Technical Summary

Problems solved by technology

However, using a balanced binary search tree to encode, although it can make the search and comparison operation more efficient, but because of the need to ensure the balance of the binary search tree, when a large number of insertion or deletion operations are performed in the database, it will lead to frequent changes in the encoding, giving Servers bring a lot of overhead

Images