属性盲化的模糊可搜索加密云存储方案

为保护基于属性的密文策略（ciphertext-policy attribute-based encryption，CP-ABE）可搜索加密云存储机制中数据使用者的属性隐私，实现云存储模糊可搜索加密，该文提出一种属性盲化的模糊可搜索加密云存储（attribute blinding fuzzy searchable encryption cloud storage，ABFSECS）方案.数据使用者的每个访问属性被随机盲化，再聚合为一个完整的盲化属性.通过关键字索引集和数据使用者生成的关键字陷门的匹配计算，实现了模糊可搜索加密云存储机制.利用云服务器的强大计算资源，引入预解密操作，减少了数据使用者的计算时间开销.安全性分析表明，ABFSECS方案具有不可伪造性，可抵抗数据使用者与云存储服务器间的共谋攻击，不会泄露数据使用者的属性隐私信息. 

Cloud Storage Scheme on Attribute Blinding Fuzzy Searchable Encryption

In order to protect the attribute privacy of the data users and achieve fuzzy searchable encryption in cloud storage, an attribute blinded fuzzy searchable encryption cloud storage (ABFSECS) scheme was presented. First, each access attribute of the data users was randomly blinded, and then all blinded attributes were polymerized into a complete blinded attribute. Second, through matching computation of the keyword index set and the keyword trapdoor, which was generated by the data user, ABFSECS scheme was arranged to realize fuzzy searchable encryption cloud storage mechanism. Finally, using the strong computing resources of the cloud server, ABFSECS scheme introduced pre-decryption operation, reducing the computing time cost. Security analysis shows that ABFSECS scheme possesses unforgeability, it can resist collusion attack between the data users and cloud storage server, and it does not disclose the attribute privacy information of the data users.