ï€ Security Implications and Mitigation Strategies for One-To-Many Order Preserving Encryption in Cloud Data Search

Cloud computing offers a flexible and efficient method for data sharing, benefiting both individuals and society. However, users may hesitate to store shared data on external servers due to concerns about the sensitive nature of the information. To address this, implementing cryptographic access control is essential. Identity-based encryption (IBE) serves as a valuable cryptographic approach to establishing secure data-sharing systems. Nonetheless, access control needs to be dynamic. When a user's authorization expires, there must be a mechanism to revoke their access, ensuring they cannot retrieve either previously or newly shared data. To achieve this, we introduce the concept of Revocable-Storage Identity-Based Encryption (RS-IBE), which ensures both forward and backward security by incorporating user revocation and cipher text updates. We further present a concrete RS-IBE construction and validate its security within a defined model. Performance comparisons highlight the scheme's advantages in functionality and efficiency, making it a viable and cost-effective solution for secure data sharing. Additionally, implementation results showcase its practical applicability. The RS-IBE scheme is proven to be adaptively secure under the decisional ℓ-DBHE assumption in the standard model. Comparative analysis confirms that our approach is efficient and functional, making it suitable for real-world applications.