USENIX Security2024
GridSE: Towards Practical Secure Geographic Search via Prefix Symmetric Searchable Encryption
Ruoyang Guo, Jiarui Li, Shucheng Yu
被引用 3 次
摘要
The proliferation of location-based services and applications has brought significant attention to data and location privacy. While general secure computation and privacy-enhancing techniques can partially address this problem, one outstanding challenge is to provide near latency-free search and compatibility with mainstream geographic search techniques, especially the Discrete Global Grid Systems (DGGS). This paper proposes a new construction, namely GridSE, for efficient and DGGS-compatible Secure Geographic Search (SGS) with both backward and forward privacy. We first formulate the notion of a semantic-secure primitive called symmetric prefix predicate encryption (SPE), for predicting whether or not a keyword contains a given prefix, and provide a construction. Then we extend SPE for dynamic prefix symmetric searchable encryption (pSSE), namely GridSE, which supports both backward and forward privacy. GridSE only uses lightweight primitives including cryptographic hash and XOR operations and is extremely efficient. Furthermore, we provide a generic pSSE framework that enables prefix search for traditional dynamic SSE that supports only full keyword search. Experimental results over real-world geographic databases of sizes (by the number of entries) from to and mainstream DGGS techniques show that GridSE achieves a speedup of - on search latency and a saving of on communication overhead as compared to the state-of-the-art. Interestingly, even compared to plaintext search, GridSE introduces only extra computational cost and additional communication cost. Source code of our scheme is available at https://github.com/rykieguo1771/GridSE-RAM.