Attribute-based encryption scheme with multi-keyword search and supporting attribute revocation in cloud storage

Abstract

We propose an attribute-based encryption scheme with multi-keyword search and supporting attribute revocation in cloud storage environment, in which binary attributes and AND-gate access policy are used. Our proposal enjoys several advantages. Firstly, multi-keyword search is available, and only when a data user's attribute set satisfies access policy in keyword index, and keyword token generated by data user matches index successfully, then data user can obtain ciphertext containing keywords. In this way, more accurate keyword search is achievable. Secondly, the search privacy of data user is protected owing to cloud servers cannot obtain any knowledge of keywords which data user is interested in. Meanwhile, the ciphertext is able to be decrypted when data user's attribute set satisfies access policy specified in the ciphertext, which can both improve security of encryption and achieve secure fine-grained access control. Thirdly, the proposed scheme supports attribute revocation, in our scheme when a data user's attribute is revoked, the version number of attribute, non-revoked data users' secret keys and related ciphertexts will be updated, such that data user whose attribute is revoked does not decrypt updated ciphertext anymore. In addition, based on the assumption of decisional linear (DL) and decisional Diffie-Hellman (DDH), our scheme is proved to be secure against selectively chosen-keyword attacks and selectively chosen-plaintext attacks respectively, and it also ensures token privacy security.

A fusion data security protection scheme for sensitive E-documents in the open network environment

“…The client’s software and hardware configuration include Windows 10 (64 bit); CPU: Intel Core i3–9100 CPU @ 3.6 GHz/4.2 GHz; Memory: 8.0 GB. In the performance and system function comparison experiment, the methods used are from [ 33 ] and [ 34 ], which are based on the attribute-based method. We use the Java Pairing-Based Cryptography library (JPBC) to reproduce [ 33 ] and [ 34 ], and our algorithm uses the data encryption function library OpenSSL (1.1.1c).…”

“…Fig 5(a) shows the time chart for the encryption and decryption by using [ 33 , 34 ] and the HSEA, respectively. In this experiment, we set the number of attribute values to 8.…”

“…In Fig 5(b) , we use data blocks of the same size in the data encryption process but set different numbers of attributes. Since [ 33 ] and [ 34 ] use attribute-based data encryption algorithms, with the increase in the number of attributes, the time required for data encryption exhibits a linear growth pattern. However, for the HSEA, the number of attributes is used only in the process of data access control, and the symmetric encryption algorithm is used for data encryption, so the increase in the number of attributes does not reduce the data encryption rate.…”

“…In Fig 6 , we compare and analyze the network costs of the whole LAN area when using [ 33 , 34 ] and our scheme. In our solution, the E-documents are stored on the client, and the encryption and decryption of data are performed by the client, so the data transmission of the system is mainly Kc2 , which greatly reduces the amount of data transmitted.…”

A Multi Keyword Searchable Attribute-based Encryption Technique for Data Access Control in Cloud Storage

“…Cloud storage is now playing a most important role [1] in our everyday lives with the rapid growth of information technology. The confidential information transferred to the cloud server should be kept secret to maintain data protection that allows data users to encrypt confidential folders while transferring [2] [38].…”