CP-ABSE: A Ciphertext-Policy Attribute-Based Searchable Encryption Scheme
Searchable encryption provides an effective mechanism that achieves secure search over encrypted data. A popular application model of searchable encryption is that a data owner stores encrypted data to a server and the server can effectively perform keyword-based search over encrypted data according...
Main Authors: | , , , , , , |
---|---|
Format: | Article |
Language: | English |
Published: |
IEEE
2019-01-01
|
Series: | IEEE Access |
Subjects: | |
Online Access: | https://ieeexplore.ieee.org/document/8600300/ |
id |
doaj-c919d3d3c00545679f14288b5b737e55 |
---|---|
record_format |
Article |
spelling |
doaj-c919d3d3c00545679f14288b5b737e552021-03-29T22:07:08ZengIEEEIEEE Access2169-35362019-01-0175682569410.1109/ACCESS.2018.28897548600300CP-ABSE: A Ciphertext-Policy Attribute-Based Searchable Encryption SchemeHui Yin0Jixin Zhang1https://orcid.org/0000-0001-6890-8953Yinqiao Xiong2https://orcid.org/0000-0002-5402-8389Lu Ou3https://orcid.org/0000-0002-8441-781XFangmin Li4Shaolin Liao5https://orcid.org/0000-0002-4432-3448Keqin Li6https://orcid.org/0000-0001-5224-4048College of Computer Engineering and Applied Mathematics, Changsha University, Changsha, ChinaCollege of Computer Science and Electronic Engineering, Hunan University, Changsha, ChinaCollege of Computer Engineering and Applied Mathematics, Changsha University, Changsha, ChinaCollege of Computer Science and Electronic Engineering, Hunan University, Changsha, ChinaCollege of Computer Engineering and Applied Mathematics, Changsha University, Changsha, ChinaArgonne National Laboratory, Lemont, IL, USADepartment of Computer Science, The State University of New York, New Paltz, NY, USASearchable encryption provides an effective mechanism that achieves secure search over encrypted data. A popular application model of searchable encryption is that a data owner stores encrypted data to a server and the server can effectively perform keyword-based search over encrypted data according to a query trapdoor submitted by a data user, where the owner’s data and the user’s queries are kept secret in the server. Recently, many searchable encryptions have been proposed to achieve better security and performance, provide secure data updatable feature (<italic>dynamics</italic>), and search results verifiable capability (<italic>verifiability</italic>). However, most of the existing works endow the data user an unlimited search capacities and do not consider a data user’s search permissions. In practical application, granting search privileges for data users is a very important measure to enforce data access control. In this paper, we propose an attribute-based searchable encryption scheme by leveraging the ciphertext-policy attribute-based encryption technique. Our scheme allows the data owner to conduct a fine-grained search authorization for a data user. The main idea is that a data owner encrypts an index keyword under a specified access policy, if and only if, a data user’s attributes satisfy the access policy, the data user can perform search over the encrypted index keyword. We provide the detailed correctness analyses, performance analyses, and security proofs for our scheme. The extensive experiments demonstrate that our proposed scheme outperforms the similar work CP-ABKS proposed by Zheng on many aspects.https://ieeexplore.ieee.org/document/8600300/Access controlattribute-based encryptionsearch authorizationsearchable encryption |
collection |
DOAJ |
language |
English |
format |
Article |
sources |
DOAJ |
author |
Hui Yin Jixin Zhang Yinqiao Xiong Lu Ou Fangmin Li Shaolin Liao Keqin Li |
spellingShingle |
Hui Yin Jixin Zhang Yinqiao Xiong Lu Ou Fangmin Li Shaolin Liao Keqin Li CP-ABSE: A Ciphertext-Policy Attribute-Based Searchable Encryption Scheme IEEE Access Access control attribute-based encryption search authorization searchable encryption |
author_facet |
Hui Yin Jixin Zhang Yinqiao Xiong Lu Ou Fangmin Li Shaolin Liao Keqin Li |
author_sort |
Hui Yin |
title |
CP-ABSE: A Ciphertext-Policy Attribute-Based Searchable Encryption Scheme |
title_short |
CP-ABSE: A Ciphertext-Policy Attribute-Based Searchable Encryption Scheme |
title_full |
CP-ABSE: A Ciphertext-Policy Attribute-Based Searchable Encryption Scheme |
title_fullStr |
CP-ABSE: A Ciphertext-Policy Attribute-Based Searchable Encryption Scheme |
title_full_unstemmed |
CP-ABSE: A Ciphertext-Policy Attribute-Based Searchable Encryption Scheme |
title_sort |
cp-abse: a ciphertext-policy attribute-based searchable encryption scheme |
publisher |
IEEE |
series |
IEEE Access |
issn |
2169-3536 |
publishDate |
2019-01-01 |
description |
Searchable encryption provides an effective mechanism that achieves secure search over encrypted data. A popular application model of searchable encryption is that a data owner stores encrypted data to a server and the server can effectively perform keyword-based search over encrypted data according to a query trapdoor submitted by a data user, where the owner’s data and the user’s queries are kept secret in the server. Recently, many searchable encryptions have been proposed to achieve better security and performance, provide secure data updatable feature (<italic>dynamics</italic>), and search results verifiable capability (<italic>verifiability</italic>). However, most of the existing works endow the data user an unlimited search capacities and do not consider a data user’s search permissions. In practical application, granting search privileges for data users is a very important measure to enforce data access control. In this paper, we propose an attribute-based searchable encryption scheme by leveraging the ciphertext-policy attribute-based encryption technique. Our scheme allows the data owner to conduct a fine-grained search authorization for a data user. The main idea is that a data owner encrypts an index keyword under a specified access policy, if and only if, a data user’s attributes satisfy the access policy, the data user can perform search over the encrypted index keyword. We provide the detailed correctness analyses, performance analyses, and security proofs for our scheme. The extensive experiments demonstrate that our proposed scheme outperforms the similar work CP-ABKS proposed by Zheng on many aspects. |
topic |
Access control attribute-based encryption search authorization searchable encryption |
url |
https://ieeexplore.ieee.org/document/8600300/ |
work_keys_str_mv |
AT huiyin cpabseaciphertextpolicyattributebasedsearchableencryptionscheme AT jixinzhang cpabseaciphertextpolicyattributebasedsearchableencryptionscheme AT yinqiaoxiong cpabseaciphertextpolicyattributebasedsearchableencryptionscheme AT luou cpabseaciphertextpolicyattributebasedsearchableencryptionscheme AT fangminli cpabseaciphertextpolicyattributebasedsearchableencryptionscheme AT shaolinliao cpabseaciphertextpolicyattributebasedsearchableencryptionscheme AT keqinli cpabseaciphertextpolicyattributebasedsearchableencryptionscheme |
_version_ |
1724192210362040320 |