Searchable encryption (SE) is a positive way to protect users sensitive data in cloud computing setting, while preserving search ability on the server side, i.e., it allows the server to search encrypted data without leaking information about the plaintext data. In this paper, a multi-client universal circuit-based full-blind quantum computation (FBQC) model is proposed. In order to meet the requirements of multi-client accessing or computing encrypted cloud data, all clients with limited quantum ability outsource the key generation to a trusted key center and upload their encrypted data to the data center. Considering the feasibility of physical implementation, all quantum gates in the circuit are replaced with the combination of {\pi}/8 rotation operator set {Rz({\pi}/4), Ry({\pi}/4), CRz({\pi}/4), CRy({\pi}/4), CCRz({\pi}/4), CCRy({\pi}/4)}. In addition, the data center is only allowed to perform one {\pi}/8 rotation operator each time, but does not know the structure of the circuit (i.e., quantum computation), so it can guarantee the blindness of computation. Then, through combining this multi-client FBQC model and Grover searching algorithm, we continue to propose a quantum searchable encryption scheme for cloud data. It solves the problem of multi-client access mode under searchable encryption in the cloud environment, and has the ability to resist against some quantum attacks. To better demonstrate our scheme, an example of our scheme to search on encrypted 2-qubit state is given in detail. Furthermore, the security of our scheme is analysed from two aspects: external attacks and internal attacks, and the result indicates that it can resist against such kinds of attacks and also guarantee the blindness of data and computation.
翻译:可搜索加密(SE)是一种在云计算环境中保护用户敏感数据的有效方式,同时保留服务器端的搜索能力,即允许服务器在不泄露明文数据信息的情况下搜索加密数据。本文提出了一种基于多客户端通用电路的全盲量子计算(FBQC)模型。为满足多客户端访问或计算加密云数据的需求,所有具备有限量子能力的客户端将密钥生成外包给可信密钥中心,并将其加密数据上传至数据中心。考虑物理实现的可行性,电路中所有量子门均替换为由π/8旋转算子集合{Rz(π/4), Ry(π/4), CRz(π/4), CRy(π/4), CCRz(π/4), CCRy(π/4)}的组合。此外,数据中心每次仅允许执行一个π/8旋转算子,且不知晓电路结构(即量子计算),从而保证计算的盲性。随后,通过结合该多客户端FBQC模型与Grover搜索算法,我们进一步提出一种面向云数据的量子可搜索加密方案。该方案解决了云环境下可搜索加密中的多客户端访问模式问题,并具备抵御部分量子攻击的能力。为更好地阐述方案,本文详细给出了在加密双量子比特态上执行搜索的实例。此外,我们从外部攻击和内部攻击两个角度分析了方案的安全性,结果表明该方案能抵御此类攻击,并同时保证数据和计算的盲性。