Symmetric searchable encryption method, device, equipment and medium

Abstract

The invention discloses a symmetric searchable encryption method and device, equipment and a medium. The method comprises the following steps: encrypting a target plaintext file to obtain a ciphertextfile; creating a file index table based on the target plaintext file and a hash chain structure, wherein the file index table comprises an accumulative verification label and a continuously updated search trap door; and uploading the ciphertext file and the file index table to a cloud server, so that the cloud server feeds back the ciphertext file and the verification label corresponding to the search trap door to the search client based on the file index table after receiving the search trap door sent by the search client, wherein after the search client receives the ciphertext file and theverification label, the correctness of the ciphertext file is verified based on the verification label. According to the invention, the forward security and the complete verifiability of data search can be realized at the same time by creating the obtained file index table containing the accumulative verification label and the search trap door which is continuously updated.

Description

technical field [0001] The invention relates to the field of data search, in particular to a symmetrical searchable encryption method, device, equipment and medium. Background technique [0002] Currently, in the process of using Symmetric Searchable Encryption (SSE, Symmetric Searchable Encryption) technology to realize data search, the data stored on the cloud server is often updated. When updating the data stored on the cloud server, the file injection Attacks may occur. The cloud server will forge a file collection to induce users to encrypt, and then the cloud server will use the previous search trapdoor to match these files. If the match is successful, it means that these files contain this keyword; further, because The cloud server knows which keywords are contained in these forged files, so it can easily infer which keyword is obtained by encrypting the matching trapdoor. Forward security requires that the newly inserted file cannot match the previous search trap. T...

AI Technical Summary

Problems solved by technology

In the prior art, the complete verification of the search results is performed through the MAC (Message Authentication Code, message authentication code) verification mechanism, but the MAC cannot resist replay attacks, that is, it cannot verify whether the search results are the latest results; The updated data is updated, or the data before the update is still returned as the search result after the update, which will cause the user to be unable to verify the correctness of the data

In order to solve this problem, in the prior art, the search results are also verified by

Images