Research On Efficient And Secure Multi-attribute Range Query Method In Cloud Computing

Based on the technical advantages of large capacity,fast computing,and low cost,more and more enterprises and organizations choose to outsource the storage and maintenance of local data to the cloud platform.In order to ensure the privacy of users,encryption is the most common and effective means before outsourcing.However,because the traditional encryption technology cannot compare the size of data through ciphertext,it does not support ciphertext-based queries,such as range query.In order to solve this problem,the order-preserving encryption technology(OPE)was proposed,and the ciphertext encrypted by the OPE technology maintains the original order of the plaintext,so the range query can be directly performed on the ciphertext.However,most of the existing OPE are weakly protected by privacy,and the security of the data cannot be fully guaranteed.Although the ideal security OPE solution is highly secure,it requires frequent extra interaction between the server and the client,or requires a large amount of client-side auxiliary storage,the performance is low.Other related technologies also have security or performance defects.In order to solve the ciphertext query in the cloud and improve the security and service performance,this paper proposes an comparable inner product coding scheme(CIPE),which supports multi-attribute range query on the ciphertext.The main idea of this schem is to construct the index and query into an encryption vector,and the data can be compared by the inner product of the two vectors.Compared with the existing schems,this schem has the following two advantages:(1)More efficient.In this scheme,the client can retrieve the interested data in just one round without any additional local assistance.(2)More secure.This solution achieves the ideal security and can resist the inference attacks that the existing OPE solution cannot resist.In addition,CIPE-0 and CIPE-S are proposed for different security models.The CIPE-S is proposed based on the CIPE-0,which further improves the security of the scheme.CIPE-0 and CIPE-S were tested with real big data sets,and the experimental results proved their correctness and efficiency.