Security indexing system based on SGX

Abstract

The invention discloses a security indexing system based on SGX. The security index system comprises the following steps: enabling a user to expand a data value by using an index keyword; inserting the key into a B + tree, and linking the B + tree with the expanded data value; providing the client to the enclave through secure connection at the client; enabling the client to send an indexing queryto the server; loading the B + tree structure from the untrusted storage into an enclave memory by the enclave, and decrypting the B + tree structure; enabling the tree to traverse from the root node, obtain a node indexing algorithm from the untrusted storage, and finally reache a group of leaf nodes to store a pointer; and obtaining the encrypted value from the untrusted storage by using the pointer, sending the encrypted value to the client, and decrypting the received file by using the client. According to the invention, the balance among the security, the performance and the function isrealized, the performance and the storage are greatly improved, and the index time also has great advantages even if complex indexing is carried out on big data.

Description

technical field [0001] The invention relates to a security index technology for encrypted data, in particular to an SGX-based security index system. Background technique [0002] With the rapid development of computer technology and Internet applications, the speed of data and applications is increasing exponentially, and people's demand for data storage is also increasing. Driven by this background, cloud storage services are welcomed by more and more users due to their advantages such as convenient use and cost saving. But in this way, the user loses absolute control over the data, which inevitably arouses the user's concern about its security. Currently, the mainstream method to ensure data confidentiality is to encrypt data. [0003] The amount of data stored in the cloud is often large, so an important way to retrieve data is through keyword indexing. However, encrypted data increases the difficulty of keyword indexing. At the same time, the way of specifying plainte...

Images