Certificateless searchable encryption method and system applied to multiple receiving ends

Abstract

The invention discloses a certificateless searchable encryption method and system applied to multiple receiving ends. The system comprises a key generation center, a sending end, a cloud server and the multiple receiving ends. The key generation center is mainly responsible for generating part of private keys of each receiving end; the sending end is responsible for generating ciphertext data; each receiving end can generate a corresponding trap door by using a private key of the receiving end, and submits the trap door to the cloud server; the cloud server is responsible for data storage andretrieval, and therefore a connection keyword retrieval function in a multi-user environment is effectively realized; via the method and the system disclosed in the invention, the data sending end canshare own data with a plurality of data receiving ends at the same time, and the sending end only needs to use the public keys of the plurality of receiving ends to encrypt the data once without encryption for many times, so that the calculation overhead of the sending end can be reduced, and the working pressure of the sending end is reduced; and meanwhile, the cloud server is ensured not to obtain any information of the plaintext from the ciphertext, and the security requirement required by the system is ensured.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a certificateless searchable encryption method and system applied to multiple receivers. Background technique [0002] Searchable encryption (SE, Searchable Encryption) is a cryptographic technology that can retrieve ciphertext data based on keywords. It can effectively realize the retrieval operation of ciphertext data without revealing any information of plaintext data. The implementation steps of SE are as follows: the data sender first extracts the keyword from the file he owns and encrypts the file and the keyword, and then uploads all the ciphertext data to the cloud server; the receiver generates a trapdoor for the keyword to be retrieved ( Encryption, decryption, a formula algorithm of a password key.), and upload the trapdoor to the cloud server; the cloud server tests whether the received trapdoor matches the ciphertext data, and finally returns the result ...

AI Technical Summary

Problems solved by technology

However, the existing CLPEKS schemes only consider the application scenario of a single receiver

If the single-receiver scheme is directly applied to the multi-receiver scenario, the sender needs to use the public keys of multiple recipients to encrypt the data multiple times, which obviously requires a large computational overhead.

Images