Searchable Encryption (SE) is an important technique to guarantee data security and usability in the cloud at the same time. Leveraging Ciphertext-Policy Attribute-Based Encryption (CP-ABE), the Ciphertext-Policy Attribute-Based Keyword Search (CP-ABKS) scheme can achieve keyword-based retrieval and fine-grained access control simultaneously. However, the single attribute authority in existing CP-ABKS schemes is tasked with costly user certificate verification and secret key distribution. In addition, this results in a single-point performance bottleneck in distributed cloud systems. Thus, in this paper, we present a secure Multi-authority CP-ABKS (MABKS) system to address such limitations and minimize the computation and storage burden on resource-limited devices in cloud systems. In addition, the MABKS system is extended to support malicious attribute authority tracing and attribute update. Our rigorous security analysis shows that the MABKS system is selectively secure in both selective-matrix and selective-attribute models. Our experimental results using real-world datasets demonstrate the efficiency and utility of the MABKS system in practical applications.

中文翻译：

---

基于多权限属性的加密云数据关键词搜索

可搜索加密（SE）是同时保证云中数据安全性和可用性的重要技术。Ciphertext-Policy Attribute-Based Encryption (CP-ABE) 的Ciphertext-Policy Attribute-Based Keyword Search (CP-ABKS) 方案利用Ciphertext-Policy Attribute-Based Encryption (CP-ABE)，可以同时实现基于关键字的检索和细粒度的访问控制。然而，现有 CP-ABKS 方案中的单一属性授权的任务是昂贵的用户证书验证和密钥分发。此外，这导致分布式云系统中的单点性能瓶颈。因此，在本文中，我们提出了一个安全的多权限 CP-ABKS (MABKS) 系统来解决这些限制，并最大限度地减少云系统中资源有限设备的计算和存储负担。此外，MABKS系统扩展支持恶意属性权限追踪和属性更新。我们严格的安全分析表明，MABKS 系统在选择性矩阵和选择性属性模型中都是选择性安全的。我们使用真实世界数据集的实验结果证明了 MABKS 系统在实际应用中的效率和实用性。