支持关键词搜索的属性代理重加密方案

属性代理重加密机制既能实现数据共享又能实现数据转发，但这种机制通常并不支持数据检索功能，阻碍了属性代理重加密的发展应用。为了解决这一问题，该文提出一个支持关键词搜索的密文策略的属性代理重加密方案。通过将密钥分为属性密钥和搜索密钥，不仅可以实现关键词可搜索，而且实现了代理重加密。在验证阶段，云服务器既执行关键词验证，又可以对原始密文和重加密密文进行部分解密，从而减轻用户的计算负担。通过安全性分析，该方案可以实现数据安全性、检索分离、关键词隐藏和抗共谋攻击。

Attribute-based Proxy Re-encryption Scheme with Keyword Search

Attribute-based proxy re-encryption mechanism can not only realize data sharing but also achieve data forwarding. However, this mechanism can not support the functionality of data retrieval, which hinders the applications of attribute-based proxy re-encryption. In order to solve the issue, this paper proposes a ciphertext- policy attribute-based proxy re-encryption scheme with keyword search. By dividing a secret key into an attribute key and a search key, the new scheme can not only achieve the keyword search, but also support proxy re- encryption. In the test phase, while conducting the keywords matching algorithm, the cloud server can do partial decryption of the original ciphertext and the re-encrypted ciphertext, which can reduce the computational burden for users. The security analysis indicates that the proposed scheme can achieve data security, hidden keywords, query isolation and collusion resistance.