Towards verifiable updatable attribute-based Boolean keywords search sharing of PHRs in cloud environment
摘要
The attribute-based signature and verifiable attribute-based keyword search offer a robust mechanism for realizing fine-grained access control in personal health records (PHR) sharing in cloud computing environments. The PHR contains highly sensitive information, making it crucial to ensure search result correctness and preserve data integrity. Verification of search results is equally important, as it guarantees the integrity and accuracy of the retrieved information without excessive computational and communication costs. However, many existing schemes fall short in protecting sensitive information that uses proof of reuse and neglect the real-time proof generation verification, posing challenges for dynamic data and access policy updates. To address current limitations, we introduce a dual-function approach that integrates attribute-based signatures and verifiable attribute-based keyword search, supporting real-time access policy and dynamic data updating for PHR sharing in cloud computing. Our framework utilizes authenticated indexes to enable secure and verifiable Boolean keyword searches, supporting both access policies and dynamic data over encrypted data without compromising encrypted data security. Moreover, our design scheme guarantees traceability, facilitating immediate dynamic updates and revocation of malicious user attributes. The formal security analysis guarantees comprehensive security against selectively chosen keywords, ciphertext, and key exposure attacks. Experimental evaluations on real-world datasets demonstrate that our scheme significantly outperforms existing schemes in terms of both efficiency and security.