基于B+树的频率隐藏保序加密方案OA
Frequency-hiding Order-preserving Encryption Scheme Based on B+ Tree
针对现有频率隐藏保序加密方案通常具有较大的时间开销或较高的客户端存储开销、方案性能平衡性较差的问题,提出一种基于B+树的频率隐藏保序加密方案,不需要额外的客户端存储,使用B+树作为编码树并提出对应的编码策略,在数据插入阶段使用叶子编号和密文在叶子内的位置作为保序编码.针对叶子分裂时可能引发的编码更新问题,设计一种新的叶子编号生成机制,使得在有可用编号的情况下,仅需局部更新叶子内数据的保序编码,无需影响其他节点.此外,该方案采用一种缓更新的策略,在没有可用叶子编号需要进行叶子编号的全局更新时,仅维护编码树的最新状态并延迟同步至数据库,避免全局编码更新带来的较大计算开销,进一步提升了方案的整体加密效率.最后使用国密SM4-CBC算法对数据进行随机加密,实现方案的自主可控.实验结果分析表明,相对于当前已有的保序加密方案来说,所提出的方案在隐藏明文频率的同时,均衡了算法的时间和空间开销,算法总体上性能的平衡性更好.
Aiming at the problems that existing frequency-hiding order-preserving encryption(FH-OPE)schemes usually have large time overhead or high client storage overhead and poor performance balance,a frequency-hiding order-preserving encryp-tion scheme based on B+tree is proposed.It does not require additional client storage,uses B+tree as the coding tree and pro-poses a corresponding coding strategy.In the data insertion stage,the leaf number and the position of the ciphertext in the leaf are used as the order-preserving code.To address the coding update problem that may arise when a leaf splits,a new leaf number generation mechanism is designed so that when there are available numbers,only the coding of the data in the leaf needs to be updated locally without affecting other nodes.In addition,the scheme uses a slow update strategy.When there are no available leaf numbers and a global update of the leaf numbers is required,only the latest state of the coding tree is maintained and syn-chronized to the database with a delay,avoiding the large computational overhead caused by the global coding update and further improving the overall encryption efficiency of the scheme.Finally,the national encryption SM4-CBC algorithm is used to ran-domly encrypt the data to achieve autonomous and controllable solutions.Experimental results analysis demonstrate that,in com-parison with existing order-preserving encryption schemes,the proposed approach effectively conceals plaintext frequency while balancing time and space complexity,thereby offering a more well-rounded performance profile.
李亚南;马利民;柳国平
北京信息科技大学计算机学院,北京 102206北京信息科技大学计算机学院,北京 102206云南省昭通市第一人民医院计算机信息中心,云南 昭通 657000
信息技术与安全科学
保序加密密态范围查询频率隐藏密文检索隐私保护
order-preserving encryptionencrypted range queriesfrequency-hidingencrypted searchprivacy protection
《计算机与现代化》 2026 (5)
43-49,7
国家重点研发计划项目(2022YFC3320903)
评论