Verifiable Attribute-Based Multi-keyword Search over Encrypted Cloud Data in Multi-owner Setting
Yaqing Fan, Zhenhua Liu · 2017
Searchable encryption is crucial for the encrypted data utilization, especially in the database generated by multiple owners. Many existing schemes support single keyword query, and assume that the search users are authorized and the returned results are correct. However, single keyword query wastes network bandwidth and computing resources, and these assumptions are not suitable for more realistic scenarios. To solve the above problems, we present a verifiable attribute-based encryption scheme supporting mulit-keyword search. The scheme allows data owners to set access control for the encrypted data via the ciphertext-policy attribute-based encryption, which can classify the sensitive data and provide search services for users according to the access rights. Meanwhile, by setting an authentication tag with the reciprocal of data owner's secret value for each encrypted data, users can verify the returned results owned by multiple owners. Finally, in the random oracle model, our scheme is proven to be selectively secure against chosen-keyword attack based on the generic bilinear group model, and the valid proof information of the verification phase is proven to be unforgeable based on the variant of BDH assumption. Compared with the existing searchable encryption schemes, the proposed scheme has the advantages of supporting both fine-grained access and the verifiability in multi-owner setting, without sacrificing the efficiency.