BIB-MKS: Post-Quantum Secure Biometric Identity-Based Multi-Keyword Search over Encrypted Data in Cloud Storage Systems
Xiaojun Zhang, Chao Huang, Dawu Gu, Jingwei Zhang, Huaxiong Wang
Abstract
Cloud computing technologies rely on powerful storage services to maintain massive data for users. Sensitive data are encrypted before outsourcing, but this limits the availability of data. Public-key encryption with keyword search (PEKS) contributes to searching target encrypted data with keywords. However, existing PEKS mechanisms require to manage certificates, they are also vulnerable to adversaries equipped with quantum-computing devices. In this paper, we devise a biometric identity-based multi-keyword search (BIB-MKS) mechanism from lattices over encrypted outsourced data, which inherently resists quantum-computing attacks. Each user in BIB-MKS is identified with her/his biometric information, which could be envisioned as the public key, thereby avoiding complex certificate managements. Particularly, BIB-MKS enables a data owner to produce an index associated with a biometric identity <formula xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink"><tex>$BID'$</tex></formula> , such that a user with a biometric identity <formula xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink"><tex>$BID$</tex></formula> issues multiple keywords in a single search query and retrieves corresponding encrypted data, if and only if <formula xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink"><tex>$BID$</tex></formula> and <formula xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink"><tex>$BID'$</tex></formula> are within a certain distance of each other as judged by some metric. BIB-MKS narrows down the search scope, and improves users search experience significantly. We define the formal security model of BIB-MKS, and prove the security of BIB-MKS under this model. The performance evaluation demonstrates that BIB-MKS is practical.