本文为美国科罗拉多州大学（作者：Mikhail Strizhov）的博士论文，共140页。

云计算支持新类型的服务，计算和网络资源可通过互联网在线获得。云计算最流行的服务之一是data outsourcing。出于成本和方便的考虑，公共和私人组织现在可以将其大量数据outsource到云上，并享受远程存储和管理的好处。同时，远程存储在不可信云服务器上的数据机密性也是一个很大的问题。为了减少这些担忧，敏感数据如个人健康记录、电子邮件、所得税和财务报告，通常采用众所周知的加密技术以加密形式外包。虽然加密数据存储可以保护远程数据不受未经授权的访问，但它会使一些基本的、但必不可少的数据利用服务（如明文关键字搜索）复杂化。下载数据、解密和本地搜索的简单解决方案显然效率低下，因为在云中存储数据毫无意义，除非可以轻松搜索和利用。因此，云服务应该能够对加密数据进行高效搜索，以提供一流的云计算环境。本文致力于开发新的可搜索加密技术，允许云服务器执行多关键字排名搜索以及包含位置信息的子串搜索。我们展示了在这方面所取得的成果，包括对现有解决方案的综合评估，以及用于排名搜索和子串位置的可搜索加密方案。

Cloud computing enables new types of services where the computational and network resources are available online through the Internet. One of the most popular services of cloud computing is data outsourcing. For reasons of cost and convenience, public as well as private organizations can now outsource their large amounts of data to the cloud and enjoy the benefits of remote storage and management. At the same time, confidentiality of remotely stored data on untrusted cloud server is a big concern. In order to reduce these concerns, sensitive data, such as, personal health records, emails, income tax and financial reports, are usually outsourced in encrypted form using well-known cryptographic techniques. Although encrypted data storage protects remote data from unauthorized access, it complicates some basic, yet essential data utilization services such as plaintext keyword search. A simple solution of downloading the data, decrypting and searching locally is clearly inefficient since storing data in the cloud is meaningless unless it can be easily searched and utilized. Thus, cloud services should enable efficient search on encrypted data to provide the benefits of a first-class cloud computing environment. This dissertation is concerned with developing novel searchable encryption techniques that allow the cloud server to perform multi-keyword ranked search as well as substring search incorporating position information. We present results that we have accomplished in this area, including a comprehensive evaluation of existing solutions and searchable encryption schemes for ranked search and substring position search.

1.       引言

2. 项目背景

3. 相关工作

4. 多关键字相似性可搜索加密方案（MKSim）

5. 组多关键字相似性可搜索加密（GMKSim）

6. 子串位置可搜索对称加密（SSP-SSE）

7. 多用户子串位置可搜索对称加密（MSSP-SSE）

8. 结论

更多精彩文章请关注公众号：