SLRA:安全且支持访问控制的法律智能范围查询方案

SLRA: secure legal intelligent range query scheme with access control

摘要

随着云计算环境下法律数据的爆炸式增长,越来越多的律师事务所倾向于将法律数据外包给云服务器以减少计算和存储开销,这不可避免地带来了安全问题.同时,现有范围查询方案大多缺乏有效的访问控制策略和正式的安全性分析.为此,提出一种安全且支持访问控制的法律智能范围查询方案---SLRA.该方案采用改进的非对称标量积保持加密(asymmetric scalar product preserving encryption, ASPE)算法,克服了原算法在已知明文攻击下不安全的缺点;使用Geohash算法构造新的索引结构,大大降低计算和存储开销,优化范围查询效率;引入基于多项式的访问控制策略,有效细化当事人的搜索权限.正式的安全性分析表明,SLRA方案具有选择明文攻击下的不可区分性(indistinguishability under chosen-plaintext attack,IND-CPA),与现有算法相比,SLRA方案搜索效率更高,功能更丰富.

Abstract

With the explosive growth of legal data in the cloud computing environment, more and more law firms tend to outsource legal data to cloud servers to reduce computing and storage costs, which inevitably brings security issues．At the same time, most existing range query schemes lack effective access control policies and formal security analysis．Therefore, a secure legal intelligent range query scheme with access control, SLRA, is proposed．First, this scheme adopts an improved asymmetric scalar product preserving encryption（ASPE）algorithm to overcome the shortcoming of the original algorithm being insecure under known plaintext attacks．Second, it uses Geohash algorithm to construct a new index structure, greatly reducing computing and storage overhead and optimizing range query efficiency．Third, it introduces a polynomial-based access control policy to effectively refine the search permissions of the parties．Formal security analysis shows that the SLRA scheme has indistinguishability under chosen-plaintext attack（IND-CPA）．Compared with existing algorithms, the SLRA scheme has higher search efficiency and richer functions.

关键词

Geohash算法 / 范围查询 / 访问控制 / 安全性

Key words

Geohash algorithm / range query / access control / security

参考文献

[1] CUI N N, LI J X, YANG X C, et al．When geo-text meets security: privacy-preserving Boolean spatial keyword queries[C]//2019 IEEE 35th International Conference on Data Engineering．Macao: IEEE, 2019: 1046-1057.

[2] WANG X Y, MA J F, LIU X M, et al．Search me in the dark: privacy-preserving Boolean range query over encrypted spatial data[C]// IEEE INFOCOM 2020 IEEE Conference on Computer Communications．Toronto: IEEE, 2020: 2253-2262.

[3] BITNER J R, EHRLICH G, REINGOLD E M．Efficient generation of the binary reflected Gray code and its applications[J]． Communications of the ACM, 1976, 19(9): 517-521.

[4] LAI S Q, PATRANABIS S, SAKZAD A, et al．Result pattern hiding searchable encryption for conjunctive queries[C]//Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security．Toronto: ACM, 2018: 745-762.

[5] YANG Y T, MIAO Y B, YING Z B, et al．Privacy-preserving threshold spatial keyword search in cloud-assisted IIoT[J]．IEEE Internet of Things Journal, 2022, 9(18): 16990-17001.

[6] SONG F Y, QIN Z, LIU D X, et al．Privacy-preserving task matching with threshold similarity search via vehicular crowdsourcing[J]． IEEE Transactions on Vehicular Technology, 2021, 70(7): 7161-7175.

[7] SU S, TENG Y P, CHENG X, et al．Privacy-preserving top-k spatial keyword queries in untrusted cloud environments[J]．IEEE Transactions on Services Computing, 2018, 11(5): 796-809.

[8] TONG Q Y, MIAO Y B, LI H W, et al．Privacy-preserving ranked spatial keyword query in mobile cloud-assisted fog computing[J]． IEEE Transactions on Mobile Computing, 2023, 22(6): 3604-3618.

[9] WONG W K, CHEUNG D W, KAO B, et al．Secure kNN computation on encrypted databases[C]//Proceedings of the 2009 ACM SIGMOD International Conference on Management of Data．Providence Rhode Island, USA: ACM, 2009: 139-152.

[10] LIN W P, WANG K, ZHANG Z L, et al．Revisiting security risks of asymmetric scalar product preserving encryption and its variants[C]//2017 IEEE 37th International Conference on Distributed Computing Systems．Atlanta: IEEE, 2017: 1116-1125.

[11] 胡宸, 沈忠华, 孟倩, 等. 基于位置服务的安全高效查询方案[J]. 杭州师范大学学报(自然科学版), 2023, 22(6): 641-648.

[12] LIANG Y R, MA J F, MIAO Y B, et al．Efficient and privacy-preserving encode-based range query over encrypted cloud data[J]． IEEE Transactions on Information Forensics and Security, 2024, 19: 9085-9099.

[13] YAN Z, LI X Y, WANG M J, et al．Flexible data access control based on trust and reputation in cloud computing[J]．IEEE Transactions on Cloud Computing, 2017, 5(3): 485-498.

[14] YU S C, WANG C, REN K, et al．Achieving secure, scalable, and fine-grained data access control in cloud computing[C]//2010 Proceedings IEEE INFOCOM．San Diego: IEEE, 2010: 1-9.

[15] MIAO Y B, MA J F, LIU X M, et al．Practical attribute-based multi-keyword search scheme in mobile crowdsourcing[J]．IEEE Internet of Things Journal, 2018, 5(4): 3008-3018.

[16] MIAO Y B, DENG R H, CHOO K R, et al．Threshold multi-keyword search for cloud-based group data sharing[J]．IEEE Transactions on Cloud Computing, 2022, 10(3): 2146-2162.

[17] MOUSSALLI R, SRIVATSA M, ASAAD S．Fast and flexible conversion of Geohash codes to and from latitude/longitude coordinates[C]//2015 IEEE 23rd Annual International Symposium on Field-Programmable Custom Computing Machines．Vancouver, Canada: IEEE, 2015: 179-186.

[18] YANG Y T, MIAO Y B, CHOO K R, et al．Lightweight privacy-preserving spatial keyword query over encrypted cloud data[C]// 2022 IEEE 42nd International Conference on Distributed Computing Systems．Bologna: IEEE, 2022: 392-402.

基金资助

国家自然科学基金项目(62302136)

国家自然科学基金项目(62402154)

浙江省自然科学基金项目(LQ22F010001)

杭州师范大学科研启动项目(4115C50221204137)