Public key encryption with keyword search (PEKS) allows a user to make search on ciphertexts without disclosing the information of encrypted messages and keywords. In practice, cryptographic operations often occur on insecure devices or mobile devices. But, these devices face the risk of being lost or stolen. Therefore, the secret keys stored on these devices are likely to be exposed. To handle the key exposure problem in PEKS, the notion of key-updatable PEKS (KU-PEKS) was proposed recently. In KU-PEKS, the users’ keys can be updated as the system runs. Nevertheless, the existing KU-PEKS framework has some weaknesses. Firstly, it can’t update the keyword ciphertexts on the storage server without leaking keyword information. Secondly, it needs to send the search tokens to the storage server by secure channels. Thirdly, it does not consider the search token security. In this work, a new PEKS framework named key-updatable and ciphertext-sharable PEKS (KU-CS-PEKS) is devised. This novel framework effectively overcomes the weaknesses in KU-PEKS and has the ciphertext sharing function which is not supported by KU-PEKS. The security notions for KU-CS-PEKS are formally defined and then a concrete KU-CS-PEKS scheme is proposed. The security proofs demonstrate that the KU-CS-PEKS scheme guarantees both the keyword ciphertext privacy and the search token privacy. The experimental results and comparisons bear out that the proposed scheme is practicable.

1 H. S. Rhee, "Trapdoor security in a searchable public-key encryption scheme with a designated tester" 83 (83): 763-771, 2010

2 Z. Fu, "Toward efficient multi-keyword fuzzy search over encrypted outsourced data with accuracy improvement" 11 (11): 2706-2716, 2016

3 M. Abdalla, "The oracle Diffie–Hellman assumptions and an analysis of DHIES" 2020 : 143-158, 2001

4 Y. Liu, "The development of proxy re-encryption" 2 (2): 1-8, 2020

5 P. Golle, "Secure conjunctive keyword search over encrypted data" 31-45, 2004

6 R. Curtmola, "Searchable symmetric encryption: Improved definitions and efficient constructions" 79-88, 2006

7 L. Li, "Searchable encryption with access control on keywords in multi-user setting" 2 (2): 9-23, 2020

8 Q. Tang, "Public-key encryption with registered keyword search" 163-178, 2009

9 L. Fang, "Public key encryption with keyword search secure against keyword guessing attacks without random oracle" 238 : 221-241, 2013

10 J. Baek, "Public key encryption with keyword search revisited" 1249-1259, 2008

11 D. Boneh, "Public key encryption with keyword search" 506-522, 2004

12 D. J. Park, "Public key encryption with conjunctive field keyword search" 73-86, 2004

13 J. Shao, "Proxy re-encryption with keyword search" 180 (180): 2576-2587, 2010

14 D. X. Song, "Practical techniques for searches on encrypted data" 44-55, 2000

15 Y. Lu, "Pairing-free certificate-based searchable encryption supporting privacy-preserving keyword search function for IIoTs" 17 (17): 2696-2706, 2021

16 X. Li, "Paillier-based fuzzy multi-keyword searchable encryption scheme with order-preserving" 65 (65): 1707-1721, 2020

17 B. Lynn, "PBC library: The Pairing-Based Cryptography Library"

18 J. Baek, "On the integration of public key data encryption and public key encryption with keyword search" 217-232, 2006

19 X. Liu, "Multi-User Verifiable Searchable Symmetric Encryption for Cloud Storage" 17 (17): 1322-1332, 2020

20 X. Yu, "Lattice-based searchable encryption scheme against inside keywords guessing attack" 64 (64): 1107-1125, 2020

21 Y. Lu, "Keyword guessing attacks on a public key encryption with keyword search scheme without random oracle and its improvement" 479 : 270-276, 2019

22 H. Anada, "Key-updatable public-key encryption with keyword search: models and generic constructions" 341-359, 2018

23 H. S. Rhee, "Improved searchable public key encryption with designated tester" 376-379, 2009

24 Y. Chen, "Generic constructions of integrated PKE and PEKS" 78 (78): 493-526, 2016

25 H. S. Rhee, "Generic construction of designated tester public-key encryption with keyword search" 205 (205): 93-109, 2012

26 Q. Dong, "Fuzzy keyword search over encrypted data in the public key setting" 729-740, 2013

27 Z. Lv, "Expressive and secure searchable encryption in the public key setting" 364-376, 2014

28 D. Boneh, "Efficient selective-ID secure identity-based encryption without random oracle" 223-238, 2004

29 T. Wu, "Efficient searchable id-based encryption with a designated server" 69 (69): 391-402, 2014

30 C. Gu, "Efficient public key encryption with keyword search schemes from pairings" 372-383, 2008

31 Y. Lu, "Efficient designated server identity-based encryption with conjunctive keyword search" 72 (72): 359-370, 2017

32 H. Cui, "Efficient and expressive keyword search over encrypted data in cloud" 15 (15): 409-422, 2018

33 J. Liu, "Dual trapdoor identity-based encryption with keyword search" 21 (21): 2599-2607, 2017

34 R. Canetti, "Chosen-ciphertext secure proxy re-encryption" 185-194, 2007

35 Y. Peng, "Certificateless public key encryption with keyword search" 11 (11): 100-113, 2014

36 J. Shi, "Authorized keyword search on encrypted data" 419-435, 2014

37 M. Ali, "Authorized attribute-based encryption multi-keywords search with policy updating" 2 (2): 31-43, 2020

38 B. Zhang, "An efficient public key encryption with conjunctive-subset keywords search" 34 (34): 262-267, 2011

39 C. Hu, "A secure searchable public key encryption scheme with a designated tester against keyword guessing attacks and its extension" 215 : 131-136, 2011

40 Z. Xia, "A secure and dynamic multi-keyword ranked search scheme over encrypted cloud data" 27 (27): 340-352, 2015