Secure Approach for Blockchain-Based Anonymous Attribute-Based Searchable Encryption Scheme for Data Sharing
摘要
Attribute-Based Encryption (ABE) is one of the most powerful paradigms which enables fine grained access-control mechanism by encrypting sensitive data using the attributes of the user/receiver. Anonymous Attribute-Based Encryption (AABE) is an extension of ABE which provides confidentiality to the attributes and identity of the user during encryption and decryption. However, these schemes often involve complex pairing operations that increase encryption and decryption time, limiting scalability in resource-constrained environments. Searchable encryption a cryptographic mechanism that enables searching on encrypted data helps to retrieve a selected subset of encrypted documents from remote storage without losing the data confidentiality. Anonymous Attribute-Based Searchable Encryption (AABSE) ensures sender and receiver anonymity while allowing search on encrypted data. Zhang et al. have proposed a blockchain-based AABSE scheme for secure data sharing. In the cryptanalysis of their scheme, we found a security loophole that compromises receiver anonymity. In this work, we explore this security flaw and demonstrate how an adversary can determine user attributes. We also propose an enhanced scheme to overcome this vulnerability.