【摘要】：云計算作為新興產(chǎn)業(yè),在近幾年得到迅速發(fā)展。越來越多的個人用戶或企業(yè)機構(gòu)愿意將本地數(shù)據(jù)存放到云端服務(wù)器,從而享受云端所提供的龐大的計算資源、按需的低成本網(wǎng)絡(luò)訪問、以及便捷的數(shù)據(jù)存儲服務(wù)。同時還避免了本地數(shù)據(jù)管理和系統(tǒng)維護的麻煩。云計算雖然有很多優(yōu)勢,但其安全問題也一直是人們所擔(dān)心的。為了保護用戶數(shù)據(jù)的隱私性,數(shù)據(jù)在上傳之前通常先加密,以密文的形式存儲到云端。在數(shù)據(jù)加密的情況下,若按照用戶需要去搜索特定的文件,普通的明文搜索方法則變得不再適用。為解決這一問題,可搜索加密應(yīng)運而生,并成為近年來云安全領(lǐng)域的研究熱點。本文對云計算中可搜索加密技術(shù)進行了研究,同時提出3個不同的方案:(1)基于倒排矩陣,提出了一個保護隱私性的可搜索加密方案。構(gòu)造加密的倒排矩陣索引結(jié)構(gòu),將索引和密文一同上傳給云服務(wù)器,憑借關(guān)鍵詞搜索陷門實現(xiàn)密文的安全搜索。安全性證明和實驗分析表明了該方案的安全性和高效性。(2)考慮到云服務(wù)器可能存在惡意行為,會導(dǎo)致返回給用戶的密文集合不完整或不正確,為此提出一個可驗證的可搜索加密方案。方案中給出了一個可驗證機制,來防止云服務(wù)器對用戶的欺騙。同時,使用倒排索引結(jié)構(gòu),實現(xiàn)了最優(yōu)的搜索效率,即次線性搜索。通過安全性分析,證明了該方案滿足自適應(yīng)安全性和可靠性。實驗結(jié)果顯示方案的搜索效率較高,驗證代價較小。(3)為了提高用戶的搜索體驗,提出一個可驗證的連接關(guān)鍵詞排名搜索方案。該方案同時實現(xiàn)了連接關(guān)鍵詞次線性搜索、相關(guān)度排序、結(jié)果可驗證的功能。在自適應(yīng)語義安全性和可靠性的定義下證明了方案的安全性。通過性能分析說明了方案具有搜索高效,驗證開銷小等優(yōu)勢。
[Abstract]:Cloud computing, as a new industry, has been developed rapidly in recent years. More and more individual users or enterprises are willing to store local data on cloud servers, thus enjoying the huge computing resources provided by the cloud, on-demand low-cost network access, and convenient data storage services. At the same time, it also avoids the trouble of local data management and system maintenance. Although cloud computing has many advantages, its security has always been a concern. In order to protect the privacy of user data, the data is usually encrypted before uploading and stored in the cloud in the form of ciphertext. In the case of data encryption, if the user needs to search for specific files, the ordinary clear text search method is no longer applicable. In order to solve this problem, searchable encryption emerges as the times require, and has become a hot research topic in the field of cloud security in recent years. In this paper, the search encryption technology in cloud computing is studied, and three different schemes are proposed: (1) based on inverted matrix, a searchable encryption scheme to protect privacy is proposed. The encrypted inverted matrix index structure is constructed, the index and ciphertext are uploaded to the cloud server together, and the secure search of ciphertext is realized by keyword search trap door. The security proof and experimental analysis show that the scheme is secure and efficient. (2) considering that the cloud server may have malicious behavior, the ciphertext set returned to the user is incomplete or incorrect, so a verifiable searchable encryption scheme is proposed. A verifiable mechanism is proposed to prevent cloud servers from deceiving users. At the same time, the inverted index structure is used to realize the optimal search efficiency, that is, sublinear search. Through security analysis, it is proved that the scheme satisfies adaptive security and reliability. The experimental results show that the search efficiency of the scheme is high and the verification cost is low. (3) in order to improve the search experience of users, a verifiable search scheme for connection keyword ranking is proposed. At the same time, the scheme realizes the function of connection key sublinear search, correlation sorting and verifiable results. The security of the scheme is proved under the definition of adaptive semantic security and reliability. The performance analysis shows that the scheme has the advantages of high search efficiency and low verification cost.
【學(xué)位授予單位】：青島大學(xué)
【學(xué)位級別】：碩士
【學(xué)位授予年份】：2017
【分類號】：TP309.7

【參考文獻】

相關(guān)期刊論文 前2條

1 王尚平;劉利軍;張亞玲;;可驗證的基于詞典的可搜索加密方案[J];軟件學(xué)報;2016年05期

2 李經(jīng)緯;賈春福;劉哲理;李進;李敏;;可搜索加密技術(shù)研究綜述[J];軟件學(xué)報;2015年01期

，

本文編號：2509575