Dynamic Searchable Symmetric Encryption With Strong Security and Robustness
Haochen Dou, Zhenwu Dan, Peng Xu, Wei Wang, Shuning Xu, Tianyang Chen, Hai Jin · IEEE Transactions on Information Forensics and Security · 2024
Dynamic Searchable Symmetric Encryption (DSSE) is a prospective technique in the field of cloud storage for secure search over encrypted data. A DSSE client can issue update queries to an honest-but-curious server for adding or deleting his ciphertexts to or from the server and delegate keyword search over those ciphertexts to the server. Numerous investigations focus on achieving strong security, likeforward-and-Type-I--backwardsecurity, to reduce the information leakage of DSSE to the server as much as possible. However, the existing DSSE with such strong security cannot keep search correctness and stable security (orrobustness, in short) if irrational queries are issued by the client, like duplicate add or delete queries and the delete queries for removing non-existed entries, to the server unintentionally. Hence, this work proposes two new DSSE schemes, named SR-DSSEaand SR-DSSEb, respectively. Both two schemes achieveforward-and-Type-I--backwardsecurity while keepingrobustnesswhen irrational queries are issued. In terms of performance, SR-DSSEahas more efficient communication costs and roundtrips than SR-DSSEb. In contrast, SR-DSSEbhas a more efficient search performance than SR-DSSEa. Its search performance is close to the existing DSSE scheme with the same security but fails to achieverobustness.