基于不经意随机访问机的对称可搜索加密技术研究进展OA
Advances in ORAM-Based Symmetric Searchable Encryption
对称可搜索加密(symmetric searchable encryption,SSE)技术允许用户将加密数据安全地存储于"诚实但好奇"的云服务器上,同时保留对密文的搜索查询能力.尽管数据被加密,用户与服务器的查询交互仍会泄露访问模式、搜索模式等敏感信息,严重威胁SSE的安全性.不经意随机访问机(oblivious ran-dom access machine,ORAM)可通过混淆内存访问的方式隐藏数据访问行为,已经被多种SSE方案用于隐藏泄露,但其存在计算复杂度与通信开销偏高的问题.从SSE与ORAM的底层实现机制出发,探讨二者融合方案在安全性与查询效率间的权衡策略,同时系统梳理了基于ORAM的SSE技术研究进展,并对该领域的未来研究方向进行展望.
Symmetric searchable encryption SSE)enables users to outsource encrypted data to honest-but-curious cloud servers while retaining the ability to execute search queries over cipher-text.However,despite encryption,the interaction between users and the server can still disclose sensi-tive information,such as access and search patterns,thereby posing significant security risks to SSE systems.Oblivious random access machine ORAM)techniques address this issue by concealing data access behaviors through access-pattern obfuscation and have consequently been integrated into a va-riety of SSE schemes to suppress such leakage.Nevertheless,ORAM-based approaches suffer from in-herent limitations,including high computational complexity and substantial communication overhead.Starting from the underlying design and implementation mechanisms of SSE and ORAM,this study explores the security-efficiency trade-offs in their integrated schemes,systematically surveys the state-of-the-art in ORAM-based SSE,and proposes potential directions for future research in this area.
樊松林;陈兰香
福建师范大学计算机与网络空间安全学院,福建 福州 350117福建师范大学计算机与网络空间安全学院,福建 福州 350117
信息技术与安全科学
对称可搜索加密访问模式搜索模式不经意随机访问机隐藏泄漏
symmetric searchable encryptionaccess patternsearch patternoblivious random access machineleakage suppression
《福建师范大学学报(自然科学版)》 2026 (2)
43-53,11
国家自然科学基金项目(62072105)福建省自然科学基金项目(2024J01068)
评论