Verifiable Searchable Symmetric Encryption, as an important cloud security technique, allows users to retrieve the encrypted data from the cloud through keywords and verify the validity of the returned results. Dynamic update for cloud data is one of the most common and fundamental requirements for data owners in such schemes. To the best of our knowledge, the existing verifiable SSE schemes supporting data dynamic update are all based on asymmetric-key cryptography verification, which involves time-consuming operations. The overhead of verification may become a significant burden due to the sheer amount of cloud data. Therefore, how to achieve keyword search over dynamic encrypted cloud data with efficient verification is a critical unsolved problem. To address this problem, we explore achieving keyword search over dynamic encrypted cloud data with symmetric-key based verification and propose a practical scheme in this paper. In order to support the efficient verification of dynamic data, we design a novel Accumulative Authentication Tag (AAT) based on the symmetric-key cryptography to generate an authentication tag for each keyword. Benefiting from the accumulation property of our designed AAT, the authentication tag can be conveniently updated when dynamic operations on cloud data occur. In order to achieve efficient data update, we design a new secure index composed by a search table ST based on the orthogonal list and a verification list VL containing AATs. Owing to the connectivity and the flexibility of ST, the update efficiency can be significantly improved. The security analysis and the performance evaluation results show that the proposed scheme is secure and efficient.

中文翻译：

---

使用基于对称密钥的验证实现对动态加密云数据的关键字搜索

Verifiable Searchable Symmetric Encryption 作为一项重要的云安全技术，允许用户通过关键字从云端检索加密数据，并验证返回结果的有效性。云数据的动态更新是此类方案中数据所有者最常见和最基本的要求之一。据我们所知，现有的支持数据动态更新的可验证 SSE 方案都是基于非对称密钥密码验证的，这涉及到耗时的操作。由于云数据量庞大，验证的开销可能会成为一个重大的负担。因此，如何实现对动态加密云数据进行高效验证的关键字搜索是一个悬而未决的关键问题。为了解决这个问题，我们探索了基于对称密钥验证的动态加密云数据的关键字搜索，并在本文中提出了一个实用的方案。为了支持动态数据的高效验证，我们设计了一种基于对称密钥密码术的新型累积身份验证标签（AAT），为每个关键字生成一个身份验证标签。受益于我们设计的AAT的累积特性，当发生对云数据的动态操作时，可以方便地更新认证标签。为了实现高效的数据更新，我们设计了一个新的安全索引，由基于正交表的搜索表 ST 和包含 AAT 的验证表 VL 组成。由于 ST 的连通性和灵活性，可以显着提高更新效率。