An efficient and secure framework of cloud storage is proposed to support privacy security in cloud storage. The framework adopts a multi-tree structure for indexing
designs an extirpation-based key derivation algorithm(EKDA)for key management
and constructs a discrete logarithm-based search on encrypted keyword(DLSEK)for data sharing and ciphertext retrieval. The lazy revocation is combined into the framework to deal with the changes of users' access right and dynamic operations of data. Analyzing results for the effectiveness of EKDA
the performance of DLSEK and the privacy security of the framework show that EKDA can efficiently reduce the communication and storage overheads and that DLSEK is an encryption technique which supports ciphertext retrieval and is one-way security. The proposed framework is privacy-preserving while supporting data access efficiently.
关键词
Keywords
references
BENALOH J, CHASE M, HORVITZ E, et al. Patient controlled encryption: ensuring privacy of electronic medical records [C]∥Proceedings of the 2009 ACM workshop on Cloud computing security. New York,USA: ACM, 2009: 103-114.
THOMPSON B, HABER S, HORNE W G, et al. Privacy-preserving computation and verification of aggregate queries on outsourced databases [C]∥Proceedings of the 9th International Symposium on Privacy Enhancing Technologies. New York, USA: ACM, 2009: 185-201.
WANG Weichao, LI Zhiwei, OWENS R, et al. Secure and efficient access to outsourced data [C]∥Proceedings of the 2009 ACM Workshop on Cloud Computing Security. New York, USA: ACM, 2009:55-66.
LIU Qin, WANG Guojun, WU Jie. An efficient privacy preserving keyword search scheme in cloud computing[C]∥Proceedings of the 2009 International Conference on Computational Science and Engineering. New York, USA: ACM, 2009: 715-720.
BONECH D, CRESCENZO D G, OSTROVSKY R, et al. Public-key encryption with keyword search [C]∥Proceedings of Eurocrypt 2004. Berlin, Germany: Springer, 2004: 506-522.
CHANG Yancheng, MITZENMACHER M. Privacy preserving keyword searches on remote encrypted data[EB/OL]. [2011-07-06]. http:∥eprint.iacr.org/2004/051.pdf
OHTAKI Y. Partial disclosure of searchable encrypted data with support for Boolean queries [C]∥Proceedings of the 2008 Third International Conference on Availability, Reliability and Security. New York,USA: ACM, 2008: 1083-1090.
BELLOVIN S, CHESWICK W. Privacy-enhanced searches using encrypted bloom filters [EB/OL]. [2011-07-06]. http:∥citeseerx.ist.psu.edu/viewdoc/download; jsessionid=FDCF3E4971210E7BF4E2BA-AD9939371C?doi=10.1.1.58.6899rep=rep1type=pdf
WONG W K, CHEUNG D W, KAO Ben, et al. Secure kNN computation on encrypted databases[C]∥Proceedings of the 35th SIGMOD International Conference on Management of Data. New York, USA:ACM, 2009: 139-152.
AGRAWAL R, KIEMAN J, SRIKANT R, et al. Order preserving encryption for numeric data [C]∥Proceedings of the 2004 ACM SIGMOD International Conference on Management of Data. New York,USA: ACM, 2004: 563-574.
SONG Wei, PENG Zhiyong, CHENG Fangquan, et al. Service-oriented adaptive search method over encrypted data in trusted database [J]. Journal of Computers, 2010, 10(8): 1324-1338.