A certificateless authenticated searchable encryption with dynamic multi-receiver for cloud storage

Abstract

The searchable encryption schemes (PEKS, IBEKS, and CLPEKS) based on public-key cryptography (i.e., PKI-based, Identity-based, and Certificateless) enable the data users to accomplish searches on encrypted data stored in cloud storage by a cloud server. However, these schemes have three fundamental challenges: (1) Impervious to Keyword Guessing Attacks (KGAs) and File Injection Attacks (FIA), (2) Keyword privacy in query-trapdoor and encryption-keywords algorithms, and (3) Support for conjunctive keyword search in dynamic multi-user environments. Consequently, the authors produced Certificateless Authenticated Searchable Encryption with Dynamic Multi-receiver (CLASEDM). It also provides two security models that enable keyword privacy in encryption-keyword and query-trapdoor: Chosen keyword to Encryption-keyword attack (CKE) and Chosen keyword to Query-trapdoor attack (CKQ). And the authentication in the encryption of the keywords method also defends against KGA and FIA attacks. Afterward, the authors perform a conjunctive keyword search and add or remove the data recipient from the document’s access list. Finally, the performance analysis shows the CLASEDM scheme outperforming the related systems in comparative and experimental studies.