Multi-User Searchable Encryption via Secret Key Distribution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing searchable encryption technologies do not adequately support multi-user information searches, leading to security concerns and increased processing loads when share-target users need to access encrypted data.
Innovation Solution
An information processing system that employs a secret distribution process to generate distribution keys, allowing share-target users to perform searches on encrypted data without sharing the user key of the share-source user, using homomorphic hash calculations to determine access permissions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the user key of the share-source user is shared with share-target users to enable multi-user search, then the accessibility and ease of operation are improved, but the security level deteriorates
Solution Approach 1:
The user key is segmented into multiple distribution keys through secret distribution. Each share-target user receives a unique distribution key instead of the full user key. This segmentation enables multi-user access while maintaining security, as no single distribution key alone can decrypt the encrypted index or perform search operations without collaboration from other holders.
Solution Approach 2:
The patent introduces an intermediary verification mechanism where the server acts as a mediator to verify search requests. The server performs homomorphic hash calculations on received distribution keys and compares them with stored hash values. This intermediary verification layer enables secure multi-user search without direct key sharing between users.
2Ease of operation
If traditional searchable encryption is used to enable multi-user search, then the ease of operation is improved, but the processing load and time consumption increase
Solution Approach 1:
The system performs preliminary actions by pre-calculating and storing hash values of distribution keys on the server during the key distribution phase. When search requests are made, the server only needs to perform homomorphic hash calculations on received keys and compare them with pre-stored values, rather than performing full encryption/decryption operations. This preliminary preparation significantly reduces processing time during actual search operations.
Solution Approach 2:
The patent replaces traditional mechanical encryption/decryption operations with homomorphic hash calculations. Instead of decrypting the encrypted index to perform searches (which is computationally intensive), the system uses homomorphic properties to verify search requests through hash comparisons. This substitution of cryptographic mechanisms dramatically reduces processing load while maintaining security.
Data Source
AI summary
There is provided an information processing system including: a first apparatus (10a) that divides a user key (UK) of a share-source user through a secret distribution process to generate a plurality of distribution keys (S1 and S2); a second apparatus (10b) that sends a processing request to execute a predetermined process by using one of a plurality of the distribution keys generated by the first apparatus; and a third apparatus (20) that makes a determination based on one of a plurality of the distribution keys generated by the first apparatus and the processing request received from the second apparatus.


