Identity-based dual-server authorization ciphertext equivalence judgment method

Abstract

The invention discloses an identity-based double-server authorization ciphertext equivalence judgment method, which takes a unique identity identifier of a user as a public key, stores user data and executes ciphertext equivalence judgment in a non-conspired double-server mode, and can effectively resist single-server keyword guessing attack. Before the double servers are not authorized, the double servers do not have the right to execute any operation on the outsourcing ciphertext of the user. After the authorization generated by the user is obtained, the master server and the slave server can only execute the ciphertext equivalence judgment process in succession, that is, the master server generates intermediate parameters for ciphertext judgment, and the slave server completes ciphertext equivalence judgment according to the intermediate parameters and returns a final judgment result to the user. The problems that an existing related public key encryption method faces public key certificate management burden, and a related method based on a single server model is difficult to resist keyword guessing attacks are solved.

Description

technical field [0001] The invention relates to the technical field of information security encryption, in particular to an identity-based double-server authorization ciphertext equivalence determination method. Background technique [0002] With the development of cloud computing technology, massive data is encrypted and stored in the cloud server, which not only saves the user's local storage space, but also ensures the privacy of the user's outsourced data. It is a routine operation to perform equivalence determination or classification of encrypted data in the cloud, but data obtained by ordinary encryption methods does not support ciphertext equivalence determination. In response to the above problems, researchers have proposed many ciphertext equivalence determination methods based on the single-server model, but these methods cannot resist keyword guessing attacks on user ciphertexts. [0003] In order to resist keyword guessing attacks and improve the security of ci...

AI Technical Summary

Problems solved by technology

[0004] The purpose of the present invention is to provide an identity-based dual-server authorized ciphertext equivalence determination method, which aims to solve the public key certificate management burden faced by the existing related public key encryption methods, and the related methods based on the single server model are difficult to resist the key word guessing attack problem

Images