The public key encryption with keyword search (PEKS) schemes are mostly applied to small data sets in mail forwarding systems. When retrieving large databases, the typical search mechanism makes them inefficient and impractical. When designing a PEKS scheme, except for remedying the vulnerability of keyword guessing attacks (KGAs), other leakage issues, such as multipattern privacy and forward/backward security are rarely considered, which may lead to information leakage. Moreover, most existing PEKS only consider applications in single-user scenarios, and cannot be directly transferred to multiuser scenarios, which undermines the value of data utilization. To cope with the above concerns, we propose a PEKS scheme based on an inverted index where the bitmap is used to build the index for the first time in PEKS to meet some seemingly conflicting yet desirable characteristics. First, it has high search efficiency under multiwriter and multiuser. Through linear transformation, users quickly retrieve data and control other users’ access to their data without relying on a third party for authentication. Second, we prove its security in an enhanced security model that achieves multipattern privacy and forward and backward security. It can also resist KGA attacks without a designated tester, which makes it more practical. Finally, it can be extended to achieve search result verification. Compare to the scheme (Zhang et al. ICWS 2016), it has absolute advantages in security and computational cost where the search efficiency is improved by two orders of magnitude.

With the development of data outsourcing technology, the data stored by cloud storage servers are exploding. Secure deduplication for encrypted data helps cloud servers reduce storage overhead in the scenario that cloud users outsource their data in ciphertext. To satisfy client-side semantic security, most existing deduplication schemes for encrypted data need trusted third parties. However, trusted third parties are difficult to deploy and may cause potential risks. Therefore, we propose a secure cloud ciphertext deduplication scheme based on Intel SGX. The proposed scheme uses the Enclave security container provided by Intel SGX as the trusted execution environment on the cloud server to replace the trusted third party to perform sensitive operations. At the same time, our scheme simplifies the secure management of the file encryption keys so that the encryption key of the files with the same data can be securely distributed to other owners of the same file without the need for the original uploader online. We prove the security of the proposed scheme and the experiment shows the efficiency of the scheme.