Time-controllable keyword search with aggregate keys and multi-delegation for secure cloud storage
摘要
Cloud storage is a giant-shared pool of resources, enabling users to share their documents with each other efficiently and effortlessly. Due to the data confidentiality concern, documents are usually encrypted and outsourced to the cloud. Key-aggregate searchable encryption (KASE) enables data owners to effectively share any selected set of encrypted documents with any group of users in cloud storage. To support flexible data sharing, numerous KASE schemes achieved multi-delegation of data access rights. However, none of existing KASE schemes considered time limits for the delegation of data access. In this paper, we propose TiCAD, a Time-Controllable keyword search scheme with Aggregate keys and multi-Delegation against keyword guessing attacks for secure cloud storage. Formally speaking, TiCAD supports time-controlled multi-delegation, where a user can set a time limit to delegate access rights to other users. We also conduct sufficient comparative experiments on Huawei Cloud, which demonstrate the practicality of our TiCAD scheme.