arrow
Return

Toward Efficient Multi-User Access Control Encrypted Search for Web Data Management

delete
delete0
PRE
AI
S
Shiyuan Xu
X
Xue Chen
Y
Yu Guo
Y
Yue Wang
S
Shang Gao
S
Siu Ming Yiu
B
Bin Xiao
DOI:10.1109/TDSC.2025.3615931delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Web data management has become crucial to data sharing among users and servers. One promising approach to guaranteeing the privacy of shared data is searchable encryption (SE), which allows users to outsource encrypted data to the web server, which can then respond confidentially to keyword queries. Several SE schemes support access control to meet data-sharing requirements. However, several works (e.g. Zhang TSC’23, Zhang TCC’21) only focus on single-user access control and ignore the need for multi-user scenarios. Besides, a malicious data owner may send useless ciphertexts to the web server, potentially making the system insecure and impractical (e.g. Wang TPDS’22, Xu TDSC’20). As a result, research regarding owner authentication and multi-user access control in SE schemes remains underexplored. In this work, we construct SEOMA, the first multi-keyword encrypted search primitive supporting owner authentication and multi-user access control for Web data management. Unlike existing solutions, our design achieves owner authentication and multi-user access control simultaneously in a malicious setting. We incorporate attribute encryption to realize the attribute authentication for a data owner. Then, we leverage the policy tree and linear secret-sharing techniques to achieve hierarchical access control for users. We also formalize and demonstrate its security in a random oracle model by reducing to the DBDH and CBDH problem. Eventually, we conduct comprehensive performance evaluations compared to existing state-of-the-art schemes. Specifically, the computation and communication overhead is only 0.05-0.4× and 0.07-0.47× compared to prior arts, respectively.
Keywords:
Web data management
searchable encryption
data security and privacy
user access control
owner authentication
applied cryptography

Journal

IEEE Transactions on Dependable and Secure Computing cover
IEEE Transactions on Dependable and Secure Computing
IF:
7.5
Papers:
2.4K
Citations:
9.6K

Organization

B
Beijing Normal University
Scholars:
3.3W
Papers: 2.7W
Citations: 4.2W
H
hong kong polytechnic university
Scholars:
3.0W
Papers: 4.1W
Citations: 921
T
the university of hong kong
Scholars:
1.0K
Papers: 511
Citations: 0
researcher View more organizations