Secure searches in the cloud: A survey

Future Generation Computer Systems

Volumn 62, Issue , 2016, Pages 66-75

  Han, Fei ^a   Qin, Jing ^a   Hu, Jiankun ^b  

^a SHANDONG UNIVERSITY   (China)

^b UNIVERSITY OF NEW SOUTH WALES   (Australia)

Author keywords

Cloud security; Cloud storage; Information retrieval; Searchable encryption; Secure keyword search

Indexed keywords

ACCESS CONTROL; DATA PRIVACY; DIGITAL STORAGE; INFORMATION RETRIEVAL; PUBLIC KEY CRYPTOGRAPHY; SEARCH ENGINES;

APPLICATION SCENARIO; CLOUD COMPUTING SERVICES; CLOUD SECURITIES; CLOUD STORAGES; SEARCHABLE ENCRYPTIONS; SEARCHABLE PUBLIC KEY ENCRYPTIONS; SECURE KEYWORD SEARCH; SYMMETRIC ENCRYPTION;

CRYPTOGRAPHY;

EID: 84958580839     PISSN: 0167739X     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.future.2016.01.007     Document Type: Article

References (77)

1. [1] P. Mell, T. Grance, The NIST definition of cloud computing. NIST Special publication. 2011. [Online] Available: http://predeveloper.att.com/home/learn/enablingtechnologies/The_NIST_Definition_of_Cloud_Computing.pdf.
2. [2] Armbrust, M., Fox, A., Griffith, R., Joseph, A., Katz, R., Konwinski, A., Lee, G., Patterson, D., Rabkin, A., Stoica, I., Zaharia, M., A view of cloud computing. Commun. ACM 53:4 (2010), 50–58.
3. [3] Feng, D., Zhang, M., Zhang, Y., Xu, Z., Study on cloud computing security. Ruan Jian Xue Bao/J. Softw. 22:1 (2011), 71–83, 10.3724/SP.J.1001.2011.03958 (in Chinese with English abstract) http://www.jos.org.cn/1000-9825/3958.htm.
4. [4] Kamara, S., Lauter, K., Cryptographic cloud storage. Financial Cryptography and Data Security, 2010, Springer, Berlin, Heidelberg, 136–149.
5. [5] Takabi, H., Joshi, J.B.D., Ahn, G.J., Security and privacy challenges in cloud computing environments. IEEE Secur. Priv. 8:6 (2010), 24–31.
6. [6] Wei, L., Zhu, H., Cao, Z., Dong, X., Jia, W., Chen, Y., Vasilakos, A., Security and privacy for storage and computation in cloud computing. Inform. Sci. 258 (2014), 371–386.
7. [7] Abdalla, M., Bellare, M., Catalano, D., Kiltz, M., Kohno, T., Lange, T., Malone-Lee, J., Neven, G., Paillier, P., Shi, H., Searchable encryption revisited: Consistency properties, relation to anonymous IBE, and extensions. Advances in Cryptology, CRYPTO 2005, 2005, Springer, Berlin, Heidelberg, 205–222.
8. [8] Chor, B., Kushilevitz, E., Goldreich, O., Sudan, M., Private information retrieval. J. ACM 45:6 (1998), 965–981.
9. [9] Boneh, D., Kushilevitz, E., Ostrovsky, R., Skeith, W.E. III, Public key encryption that allows PIR queries. Advances in Cryptology, CRYPTO 2007, 2007, Springer, Berlin, Heidelberg, 50–67.
10. [10] Ogata, W., Kurosawa, K., Oblivious keyword search. J. Complexity 20:2 (2004), 356–371.
11. [11] Shen, E., Shi, E., Waters, B., Predicate privacy in encryption systems. Theory of Cryptography, 2009, Springer, Berlin, Heidelberg, 457–473.
12. [12] C. Bösch, P. Hartel, W. Jonker, A. Peter, A survey of provably secure searchable encryption, ACM Comput. Surv. 47(2) 1–18.
13. [13] Gentry, C., Computing arbitrary functions of encrypted data. Commun. ACM 53:3 (2010), 97–105.
14. [14] M.S. Islam, M. Kuzu, M. Kantarcioglu, Access pattern disclosure on searchable encryption: Ramification, attack and mitigation, in: NDSS. 2012, vol. 20, pp. 1–12.
15. [15] Liu, C., Zhu, L., Wang, M., Tan, Y.A., Search pattern leakage in searchable encryption: Attacks and new construction. Inform. Sci. 265 (2014), 176–188.
16. [16] Goldreich, O., Foundations of Cryptography: Volume 2, Basic Applications. 2009, Cambridge University Press.
17. [17] Baek, J., Safavi-Naini, R., Susilo, W., Public key encryption with keyword search revisited. Computational Science and Its Applications, ICCSA 2008, 2008, Springer, Berlin, Heidelberg, 1249–1259.
18. [18] Boneh, D., Di Crescenzo, G., Ostrovsky, R., Persiano, G., Public key encryption with keyword search. Advances in Cryptology, Eurocrypt 2004, 2004, Springer, Berlin, Heidelberg, 506–522.
19. [19] Fang, L., Susilo, W., Ge, C., Wang, J., A secure channel free public key encryption with keyword search scheme without random oracle. Cryptology and Network Security, 2009, Springer, Berlin, Heidelberg, 248–258.
20. [20] Fang, L., Susilo, W., Ge, C., Wang, J., Public key encryption with keyword search secure against keyword guessing attacks without random oracle. Inform. Sci. 238 (2013), 221–241.
21. [21] Rhee, H.S., Park, J.H., Susilo, W., Lee, D.H., Trapdoor security in a searchable public-key encryption scheme with a designated tester. J. Syst. Softw. 83:5 (2010), 763–771.
22. [22] Rhee, H.S., Park, J.H., Susilo, W., Lee, D.H., Improved searchable public key encryption with designated tester. Proceedings of the 4th International Symposium on Information, Computer, and Communications Security, 2009, ACM, 376–379.
23. [23] Hu, C., Liu, P., A secure searchable public key encryption scheme with a designated tester against keyword guessing attacks and its extension. Advances in Computer Science, Environment, Ecoinformatics, and Education, 2011, Springer, Berlin, Heidelberg, 131–136.
24. [24] Xu, P., Jin, H., Wu, Q., Wang, W., Public-key encryption with fuzzy keyword search: A provably secure scheme under keyword guessing attack. IEEE Trans. Comput. 62:11 (2012), 2266–2277.
25. [25] Han, F., Qin, J., A function private attribute-based encryption. Int. J. Distrib. Sens. Netw. 2014 (2014), 1–5.
26. [26] D. Boneh, A. Raghunathan, G. Segev, Function-private identity-based encryption: Hiding the function in functional encryption, in: Advances in Cryptology, CRYPTO, 2013, vol. 13, pp. 461–478.
27. [27] Yu, Y., Ni, J., Yang, H., Mu, Y., Susilo, W., Efficient public key encryption with revocable keyword search. Secur. Commun. Netw. 7:2 (2013), 466–472.
28. [28] Curtmola, R., Garay, J., Kamara, S., Ostrovsky, R., Searchable symmetric encryption: improved definitions and efficient constructions. Proceedings of the 13th ACM Conference on Computer and Communications Security, 2006, ACM, 79–88.
29. [29] Li, M., Yu, S., Cao, N., Lou, W., Authorized private keyword search over encrypted data in cloud computing. 31st International Conference on Distributed Computing Systems, ICDCS, 2011, IEEE, 383–392.
30. [30] Yang, Y., Lu, H., Weng, J., Multi-user private keyword search for cloud computing. IEEE Third International Conference on Cloud Computing Technology and Science, CloudCom, 2011, IEEE, 264–271.
31. [31] Song, D.X., Wagner, D., Perrig, A., Practical techniques for searches on encrypted data. IEEE Symposium on Security and Privacy. S&P 2000. Proceedings, 2000, IEEE, 44–55.
32. [32] Chang, Y.C., Mitzenmacher, M., Privacy preserving keyword searches on remote encrypted data. Applied Cryptography and Network Security, 2005, Springer, Berlin, Heidelberg, 442–455.
33. [33] E.J. Goh, Secure indexes, in: IACR Cryptology ePrint Archive, 2003, p. 216.
34. [34] Golle, P., Staddon, J., Waters, B., Secure conjunctive keyword search over encrypted data. Applied Cryptography and Network Security, 2004, Springer, Berlin, Heidelberg, 31–45.
35. [35] Cao, N., Wang, C., Li, M., Ren, K., Lou, W., Privacy-preserving multi-keyword ranked search over encrypted cloud data. INFOCOM, 2011 Proceedings IEEE, 2011, IEEE, 829–837.
36. [36] Wang, C., Cao, N., Li, J., Ren, K., Lou, W., Secure ranked keyword search over encrypted cloud data. 2010 IEEE 30th International Conference on Distributed Computing Systems, ICDCS, 2010, IEEE, 253–262.
37. [37] Wang, C., Cao, N., Ren, K., Lou, W., Enabling secure and efficient ranked keyword search over outsourced cloud data. IEEE Trans. Parallel Distrib. Syst. 23:8 (2012), 1467–1479.
38. [38] Sun, W., Cao, N., Li, M., Lou, W., Hou, Y.T., Li, H., Verifiable Privacy-preserving multi-keyword text search in the cloud supporting similarity-based ranking. IEEE Trans. Parallel Distrib. Syst. 25:11 (2014), 3025–3035.
39. [39] Sun, W., Wang, B., Cao, N., Li, M., Lou, W., Hou, Y.T., Li, H., Privacy-preserving multi-keyword text search in the cloud supporting similarity-based ranking. Proceedings of the 8th ACM SIGSAC Symposium on Information, Computer and Communications Security, 2013, ACM, 71–82.
40. [40] Bouabana-Tebibel, T., Kaci, A., Parallel search over encrypted data under attribute based encryption on the cloud computing. Comput. Secur., 2015, 10.1016/j.cose.2015.04.007.
41. [41] C. Chen, X. Zhu, P. Shen, et al. An efficient privacy-preserving ranked keyword search method. IEEE Trans. Parallel Distrib. Syst. http://dx.doi.org/10.1109/TPDS.2015.2425407.
42. [42] Boneh, D., Waters, B., Conjunctive, subset, and range queries on encrypted data. Theory of Cryptography, 2007, Springer, Berlin, Heidelberg, 535–554.
43. [43] Shi, E., Bethencourt, J., Chan, T.H., Song, D., Perrig, A., Multi-dimensional range query over encrypted data. IEEE Symposium on Security and Privacy, SP’07, 2007, IEEE, 350–364.
44. [44] Boldyreva, A., Chenette, N., O'Neill, A., Order-preserving encryption revisited: Improved security analysis and alternative solutions. Advances in Cryptology, CRYPTO 2011, 2011, Springer, Berlin, Heidelberg, 578–595.
45. [45] Kuzu, M., Islam, M.S., Kantarcioglu, M., Efficient similarity search over encrypted data. IEEE 28th International Conference on Data Engineering, ICDE, 2012, IEEE, 1156–1167.
46. [46] Bringer, J., Chabanne, H., Kindarji, B., Error-tolerant searchable encryption. IEEE International Conference on Communications, ICC’09, 2009, IEEE, 1–6.
47. [47] Li, J., Wang, Q., Wang, C., Cao, N., Ren, K., Lou, W., Fuzzy keyword search over encrypted data in cloud computing. INFOCOM, 2010 Proceedings IEEE, 2010, IEEE, 1–5.
48. [48] Wang, J., Ma, H., Tang, Q., Li, J., Zhu, H., Ma, S., Chen, X., Efficient verifiable fuzzy keyword search over encrypted data in cloud computing. Comput. Sci. Inf. Syst. 10:2 (2013), 667–684.
49. [49] Wang, B., Yu, S., Lou, W., Hou, Y.T., Privacy-preserving multi-keyword fuzzy search over encrypted data in the cloud. INFOCOM, 2014 Proceedings IEEE, 2014, IEEE, 2112–2120.
50. [50] Van Liesdonk, P., Sedghi, S., Doumen, J., Hartel, P., Jonker, W., Computationally efficient searchable symmetric encryption. Secure Data Management, 2010, Springer, Berlin, Heidelberg, 87–100.
51. [51] Kamara, S., Papamanthou, C., Roeder, T., Dynamic searchable symmetric encryption. Proceedings of the 2012 ACM Conference on Computer and Communications Security, 2012, ACM, 965–976.
52. [52] Kamara, S., Papamanthou, C., Parallel and dynamic searchable symmetric encryption. Financial Cryptography and Data Security, 2013, Springer, Berlin, Heidelberg, 258–274.
53. [53] E. Stefanov, C. Papamanthou, E. Shi, Practical dynamic searchable encryption with small leakage, in: IACR Cryptology ePrint Archive. 2013. p. 832.
54. [54] Chai, Q., Gong, G., Verifiable symmetric searchable encryption for semi-honest-but-curious cloud servers. 2012 IEEE International Conference on Communications, ICC, 2012, IEEE, 917–922.
55. [55] Kurosawa, K., Ohtaki, Y., UC-secure searchable symmetric encryption. Financial Cryptography and Data Security, 2012, Springer, Berlin, Heidelberg, 285–298.
56. [56] Scheuermann, P., Ouksel, M., Multidimensional B-trees for associative searching in database systems. Inform. Syst. 7:2 (1982), 123–137.
57. [57] Li, J., Ren, K., Zhu, B., Wan, Z., Privacy-aware attribute-based encryption with user accountability. Information Security, 2009, Springer, Berlin, Heidelberg, 347–362.
58. [58] Rhee, H.S., Byun, J.W., Lee, D.H., Lim, J., Oblivious conjunctive keyword search. Information Security Applications, 2006, Springer, Berlin, Heidelberg, 318–327.
59. [59] Han, F., Qin, J., Oblivious fuzzy keyword search based on blind GDH signature. Comput. Sci. Appl. 3 (2013), 127–133.
60. [60] Naor, M., Pinkas, B., Oblivious transfer and polynomial evaluation. Proceedings of the Thirty-First Annual ACM Symposium on Theory of Computing, 1999, ACM, 245–254.
61. [61] Naor, M., Pinkas, B., Oblivious polynomial evaluation. SIAM J. Comput. 35:5 (2006), 1254–1281.
62. [62] Freedman, M.J., Ishai, Y., Pinkas, B., Reingold, O., Keyword search and oblivious pseudorandom functions. Theory of Cryptography, 2005, Springer, Berlin, Heidelberg, 303–324.
63. [63] Tang, Q., Chen, L., Public-key encryption with registered keyword search. Public Key Infrastructures, Services and Applications, 2010, Springer, Berlin, Heidelberg, 163–178.
64. [64] Ibraimi, L., Nikova, S., Hartel, P., Jonker, W., Public-key encryption with delegated search. Applied Cryptography and Network Security, 2011, Springer, Berlin, Heidelberg, 532–549.
65. [65] Blaze, M., Bleumer, G., Strauss, M., Divertible protocols and atomic proxy cryptography. Advances in Cryptology, EUROCRYPT’98, 1998, Springer, Berlin, Heidelberg, 127–144.
66. [66] Shao, J., Cao, Z., Liang, X., Lin, H., Proxy re-encryption with keyword search. Inform. Sci. 180:13 (2010), 2576–2587.
67. [67] Dong, C., Russello, G., Dulay, N., Shared and searchable encrypted data for untrusted servers. Data and Applications Security XXII, 2008, Springer, Berlin, Heidelberg, 127–143.
68. [68] Bellare, M., Boldyreva, A., O'Neill, A., Deterministic and efficiently searchable encryption. Advances in Cryptology, CRYPTO 2007, 2007, Springer, Berlin, Heidelberg, 535–552.
69. [69] Sahai, A., Waters, B., Fuzzy identity-based encryption. Advances in Cryptology, EUROCRYPT 2005, 2005, Springer, Berlin, Heidelberg, 457–473.
70. [70] Bethencourt, J., Sahai, A., Waters, B., Ciphertext-policy attribute-based encryption. IEEE Symposium on Security and Privacy, SP’07, 2007, IEEE, 321–334.
71. [71] Goyal, V., Pandey, O., Sahai, A., Waters, B., Attribute-based encryption for fine-grained access control of encrypted data. Proceedings of the 13th ACM Conference on Computer and Communications Security, 2006, ACM, 89–98.
72. [72] Waters, B., Ciphertext-policy attribute-based encryption: An expressive, efficient, and provably secure realization. Public Key Cryptography, PKC 2011, 2011, Springer, Berlin, Heidelberg, 53–70.
73. [73] Han, F., Qin, J., Zhao, H., Hu, J., A general transformation from KP-ABE to searchable encryption. Future Gener. Comput. Syst. 30 (2014), 107–115.
74. [74] Xhafa, F., Wang, J., Chen, X., Liu, J.K., Li, J., Krause, P., An efficient PHR service system supporting fuzzy keyword search and fine-grained access control. Soft Comput. 18:9 (2014), 1795–1802.
75. [75] Wen, M., Lu, R., Lei, J., Li, H., Liang, X., Shen, X.S., Sesa: an efficient searchable encryption scheme for auction in emerging smart grid marketing. Secur. Commun. Netw. 7:1 (2014), 234–244.
76. [76] Zhang, Y., Qin, J., Du, L., A secure biometric authentication based on PEKS. Concurr. Comput.: Pract. Exper., 2015, 10.1002/cpe.3539.
77. [77] N. Cao, Z. Yang, C. Wang, K. Ren, W. Lou, Privacy preserving query over encrypted graph structured data in cloud computing, in: ICDCS’11, 2011, pp. 393–402.