Dynamic Searchable Encryption with Updatable Keys and Blockchain Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing searchable encryption methods lack integrity and confidentiality due to shared secret keys between data users and owners, requiring complete trust and leading to potential security vulnerabilities.
Innovation Solution
A dynamic and verifiable searchable encryption method using updatable encryption and blockchain, where the data owner encrypts keywords and document identifiers, uploads them to the cloud with message authentication codes, and verifies search results through blockchain XOR values to ensure security and integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the secret key is shared by the data user and the data owner, then the search function can be provided for encrypted data, but the data integrity and confidentiality cannot be guaranteed due to high security requirements and complete trust dependency
Solution Approach 1:
The patent introduces a blockchain as an intermediary layer between the data owner and data user. The blockchain stores encrypted indexes and verification information, enabling search functionality while maintaining data confidentiality and integrity without requiring direct key sharing between parties.
Solution Approach 2:
The patent segments the encryption system into multiple components: the data owner holds part of the encryption key, the blockchain stores encrypted indexes with verification information, and the data user performs searches without accessing the full secret key. This segmentation eliminates the need for complete trust between parties.
2Reliability
If the secret key is updated frequently to enhance security, then the confidentiality is improved, but the storage and computation overhead increases
Solution Approach 1:
The patent implements dynamic encryption where the blockchain can update encrypted indexes without requiring complete re-encryption of all data. The system adapts to security requirements by allowing selective updates of encryption keys and corresponding indexes, reducing storage and computation overhead compared to static re-encryption approaches.
3Measurement precision
If the search results are verified through detailed checking, then the correctness and accuracy are improved, but the verification efficiency decreases
Solution Approach 1:
The patent performs preliminary verification by storing message authentication codes (MACs) and encrypted indexes in the blockchain before search operations. During search, the system quickly verifies results by comparing pre-stored verification information, achieving both high correctness and efficiency without requiring detailed post-search checking.
Data Source
AI summary
A dynamic and verifiable searchable encryption method based on updatable encryption and blockchain and a system thereof are provided. The method is suitable for the real scene where the data user and the data owner are not the same party. The method adopts the updatable technology to update the secret key in the searchable encryption, and the security of the key update could achieve Chosen Ciphertext Security (CCA) and Ciphertext Integrity (CTXT) security. In addition, the method is used to judge whether the cloud server is “trustworthy” by verifying the search results publicly based on the blockchain. Therefore, the verifiable dynamic searchable encryption method based on updatable encryption and blockchain has been greatly improved in terms of practicability and security.