Towards trustworthy and private keyword search in encrypted decentralized storage

Cai, Chengjun; Yuan, Xingliang; Wang, Cong

doi:10.1109/icc.2017.7996810

Cited by 60 publications

(22 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…An alternative to querying patient data off-chain is to search the distributed encrypted data directly in a decentralized manner. The authors in [35] have proposed an encrypted decentralized storage architecture that supports keyword searching to prevent returning the malicious results. A downside of implementing such a technique is the requirement of establishing a new storage architecture that can add complexity to the solution.…”

Section: E Interactions and Message Sequencementioning

confidence: 99%

Blockchain for Giving Patients Control Over Their Medical Records

et al. 2020

View full text Add to dashboard Cite

Personal health records (PHRs) are valuable assets to individuals because they enable them to integrate and manage their medical data. A PHR is an electronic application through which patients can manage their health information. Giving patients control over their medical data offers an advantageous realignment of the doctor-patient dynamic. However, today's PHR management systems fall short of giving reliable, traceable, trustful, and secure patients control over their medical data, which poses serious threats to their authenticity and accuracy. Moreover, most of the current approaches and systems leveraged for managing PHR are centralized that not only make medical data sharing difficult but also pose a risk of single point of failure problem. In this paper, we propose Ethereum blockchain-based smart contracts to give patients control over their data in a manner that is decentralized, immutable, transparent, traceable, trustful, and secure. The proposed system employs decentralized storage of interplanetary file systems (IPFS) and trusted reputation-based re-encryption oracles to securely fetch, store, and share patients' medical data. We present algorithms along with their full implementation details. We evaluate the proposed smart contracts using two important performance metrics, such as cost and correctness. Furthermore, we provide security analysis and discuss the generalization aspects of our solution. We outline the limitations of the proposed approach. We make the smart contract source code publicly available on Github. INDEX TERMS Blockchain, Ethereum, smart contracts, personal health records, healthcare, access control.

show abstract

Section: E Interactions and Message Sequencementioning

confidence: 99%

Blockchain for Giving Patients Control Over Their Medical Records

et al. 2020

View full text Add to dashboard Cite

show abstract

“…The user-end includes the client machine, often in the form of a thin-client (eg, smart phone or tablet) with limited computational power. 78 The system proposed by Cai et al 78 utilizes crypto-currencies and cryptographic incremental hashing to solve the mentioned concerns. An edge computing paradigm can be utilized to bypass this bottleneck.…”

Section: Edge Computing For Searchable Encryptionmentioning

confidence: 99%

Survey on secure search over encrypted data on the cloud

Pham

Woodworth

Salehi

2019

Concurrency and Computation

View full text Add to dashboard Cite

Cloud computing has become a potential resource for businesses and individuals to outsource their data to remote but highly accessible servers. However, the potential of cloud services has not been fully realized due to users concerns about data privacy and security. User-side encryption techniques can be employed to mitigate the security concerns, but once the data is encrypted, no processing (eg, searching) can be performed on the outsourced data. Searchable Encryption (SE) techniques have been widely studied to enable searching on the data while they are encrypted. These techniques enable various types of search on the encrypted data and offer different levels of security. While these techniques enable different search types and vary in details, they share similarities in their components and architectures. In this paper, we provide a comprehensive survey on different secure search techniques, a high-level architecture for these systems, and an analysis of their performance and security level. KEYWORDScloud security, encrypted search, search over encrypted data, survey INTRODUCTIONAs cloud computing becomes prevalent, more cloud-based solutions are being developed and widely used in different applications. Companies that have adopted cloud storage solutions are reported to gain a competitive edge against those that have not. 1Cloud computing is favored due to its many advantages, including convenience and accessibility, consistent back ups to reducing the burden of local storage, and saving capital expenditure on in-house hardware and software maintenance. 2 However, public cloud storage services may be utilized by multi-tenant customers who store large amounts of potentially sensitive data on the cloud. Using cloud storage implies losing full control over data and delegating it to the cloud administrators, exposing the data to potential external and internal attacks, 3,4 which can be devastating for organizations that rely on confidentiality of their data (eg, financial corporations).These problems have made businesses concerned about outsourcing their data to the cloud and utilizing its potential. 5,6 For instance, a medical center that owns patients' health records cannot outsource its data to a cloud that is vulnerable to attacks, due to legal regulations. 7 In another instance, a law enforcement agency that keeps sensitive criminal records will hesitate to use cloud storage because of similar concerns.this approach remains impractical. Therefore, searchable encryption systems (eg, see other works 12-15 ) have been introduced to cope with this problem. These systems ideally allow the encrypted data to be searched without revealing the data and search query. Hence, they relieve concerns about data confidentiality in the cloud. Efforts to create searchable encryption systems date back to 2000 with work by Song et al. 11 Since then, numerous research works have been undertaken to enable different types of searchable encryption. Although these systems differ in their search approaches, security level, and perf...

show abstract

“…Lei et al [147] proposed a new key management scheme for key transfer between security managers in a heterogeneous VCS (vehicular communication system) network, realizing secure transmission of the key by introducing block-chain technology. Furthermore, Cai et al [148] proposed a trustworthy and private keyword search in encrypted decentralized storage to protect files and query confidentiality, while minimizing search latency.…”

Section: Block-chain Technologymentioning

confidence: 99%

Overview of 5G security technology

Huang

Jin

et al. 2018

Sci. China Inf. Sci.

View full text Add to dashboard Cite

The 5th-generation mobile communication system (5G) has higher security requirements than previous systems. Accordingly, international standard organizations, operators, and equipment manufacturers are focusing extensively on 5G security technology. This paper analyzes the security requirements of 5G business applications, network architecture, the air interface, and user privacy. The development trends of 5G security architecture are summarized, with a focus on endogenous defense architecture, which represents a new trend in 5G security development. Several incremental 5G security technologies are reviewed, including physical layer security, lightweight encryption, network slice security, user privacy protection, and block chain technology applied to 5G.

show abstract

Towards trustworthy and private keyword search in encrypted decentralized storage

Cited by 60 publications

References 12 publications

Blockchain for Giving Patients Control Over Their Medical Records

Blockchain for Giving Patients Control Over Their Medical Records

Survey on secure search over encrypted data on the cloud

Overview of 5G security technology

Contact Info

Product

Resources

About