Efficient backward private searchable encryption

Article type: Research Article

Authors: Chatterjee, Sanjit^{; *} | Parshuram Puria, Shravan Kumar | Shah, Akash

Affiliations: Department of Computer Science and Automation, Indian Institute of Science, Bangalore, India. E-mails: sanjit@iisc.ac.in, shravan@iisc.ac.in, shaha@iisc.ac.in

Correspondence: [*] Corresponding author. E-mail: sanjit@iisc.ac.in.

Abstract: Dynamic Searchable Symmetric Encryption (DSSE), apart from providing support for search operation, allows a client to perform update operations on outsourced database efficiently. Two security properties, viz., forward privacy and backward privacy are desirable from a DSSE scheme. The former captures that the newly updated entries cannot be related to previous search queries and the latter ensures that search queries should not leak matching entries after they have been deleted. These security properties are formalized in terms of the information leakage that can be incurred by the respective constructions. Existing backward private constructions either have a non-optimal communication overhead or they make use of heavy cryptographic primitives. Our main contribution consists of two efficient backward private schemes ΠBP and ΠWBP that aim to achieve practical efficiency by using light weight symmetric cryptographic components only. In the process, we also revisit the existing definitions of information leakage for backward privacy [Bost et al. (In ACM CCS (2017) 1465–1482 ACM Press)] and propose a relaxed formulation. ΠBP is the first construction to achieve backward privacy in the general setting with optimal communication complexity. Our second construction, ΠWBP, is the first single round-trip scheme achieving backward privacy in a restricted setting with optimal communication complexity using light weight symmetric cryptographic primitives. The prototype implementations of our schemes depict the practicability of the proposed constructions and indicate that the cost of achieving backward privacy over forward privacy is substantially small. The performance results also show that the proposed constructions outperform the currently most efficient scheme achieving backward privacy.

Keywords: Dynamic Searchable Symmetric Encryption, backward privacy, forward privacy

DOI: 10.3233/JCS-191322

Journal: Journal of Computer Security, vol. 28, no. 2, pp. 229-267, 2020