云环境下可搜索加密技术安全机制及应用陷阱

为了能在云计算环境下安全地使用可搜索加密技术，针对近几年来可搜索加密技术的研究成果,总结了云计算环境下对称/非对称可搜索加密技术的主要算法模型与安全模型,分析了安全方案的安全缺陷,并分析了基本可搜索加密方案与加入了密文安全传输、匿名性、第三方代理、隐私保护协议的四类增强方案在基于选择关键字攻击、字典攻击、统计分析攻击、选择明文攻击四类攻击模型下的安全性。最后,总结了可搜索加密技术的应用陷阱,并提出了当前可搜索加密技术面临的安全性挑战。

Security and Application Traps of Searchable Encryption Technique in Cloud Environment

In order to safely use searchable encryption technique in cloud computing environment, this paper studies the searchable encryption technique which is researched in recent years, summarizes the main scheme model and security model for symmetric/asymmetric searchable encryption schemes in cloud computing environment, analyzes the security vulnerabilities of each scheme. Under chosen keywords attack, dictionary attack, statistical attack, chosen plaintext attack models, this paper summarizes the securities of the basic searchable encryption scheme and the improved schemes with secure ciphertext transmission, anonymity, third party, or private information retrieval protocol. Finally, this paper summarizes the application traps of the searchable encryption technique and proposes the current security challenges.