Robust Dynamic Searchable Symmetric Encryption with CollusionResistance for Internet of Vehicles

CHEN Liqing; WU Yeting; LIU Zhiquan

doi:10.11999/JEIT260277

Article Contents

Article Navigation > Journal of Electronics & Information Technology > 2025 >

CHEN Liqing, WU Yeting, LIU Zhiquan. Robust Dynamic Searchable Symmetric Encryption with CollusionResistance for Internet of Vehicles[J]. Journal of Electronics & Information Technology. doi: 10.11999/JEIT260277

Citation:

CHEN Liqing, WU Yeting, LIU Zhiquan. Robust Dynamic Searchable Symmetric Encryption with CollusionResistance for Internet of Vehicles[J]. Journal of Electronics & Information Technology. doi: 10.11999/JEIT260277

Citation:

PDF( 2864 KB)

Robust Dynamic Searchable Symmetric Encryption with CollusionResistance for Internet of Vehicles

doi: 10.11999/JEIT260277 cstr: 32379.14.JEIT260277

1.
School of Computer and Software Engineering, Huai’an University, Jiangsu 223003, China
2.
College of Cyber Security, Jinan University, Guangzhou 510632, China

Funds: The National Natural Science Foundation of China (62272195), Major Program of Basic Science (Natural Science) Research in Higher Education Institutions of Jiangsu Province of China (25KJA520003)

Received Date: 2026-03-16
Accepted Date: 2026-09-13
Rev Recd Date: 2026-09-13

Available Online: 2026-10-13

Abstract

Abstract

Objective With the continuous expansion of the Internet of Vehicles (IoV), its applications have become increasingly widespread. Users commonly outsource encrypted data to cloud servers, and Dynamic Searchable Symmetric Encryption (DSSE) provides an effective approach for dynamically updating and searching encrypted data. However, existing DSSE schemes still face several challenges in practical applications. On the one hand, DSSE cannot simultaneously support multi-user scenarios and verifiable search results. Multi-user functionality improves collaborative efficiency among groups, whereas search result verification ensures the correctness and reliability of query results. On the other hand, DSSE needs to achieve forward and backward privacy to protect sensitive data. Forward privacy ensures that newly inserted vehicle data cannot be associated with historical search tokens. Backward privacy ensures that deleted vehicle data are not exposed in subsequent queries and that cloud servers cannot recover deleted data using current or future query information. Furthermore, the risks of collusion attacks between malicious users and cloud servers, as well as the robustness of the scheme, should be considered during design. Methods A state chain mechanism based on random numbers is designed to achieve forward privacy by ensuring that newly added data cannot be associated with historical search tokens. Meanwhile, a bitmap index-based construction method is adopted to achieve backward privacy and prevent information leakage from deleted data during subsequent queries. Furthermore, a dual bitmap index structure consisting of a keyword bitmap index and an operation bitmap index is constructed and combined with Boolean circuit technology to design a DSSE framework that simultaneously satisfies forward privacy, backward privacy, and robustness. The framework maintains stable system operation when facing abnormal or unreasonable update requests. In addition, an IDentity-based Key Encapsulation Mechanism (ID-KEM) is adopted to support multi-user scenarios where corrupted users and untrusted cloud servers may collude. This mechanism enables data owners to avoid storing additional information for authorized users, thereby reducing the storage overhead at the data owner’s side. Moreover, the cloud server is required to provide a proof of work based on verification labels when returning search results, enabling users to verify the integrity and correctness of the results. Results and Discussions The security of the RDSSE-CR scheme is demonstrated through a series of games between the real game $ \text{REAL}_{\mathcal{A}}^{\varPi }({1}^{\lambda }) $ and ideal game $ \mathrm{IDEAL}_{\mathcal{A}}^{\varPi }({1}^{\lambda }) $. First, by constructing games $ {G}_{0} $ to $ {G}_{7} $, the distinguishing capability of the adversary is gradually reduced. Under the assumptions of pseudorandom function security, hash function collision resistance, and symmetric encryption security, the distinguishing advantage of the adversary is proved to be negligible, demonstrating that the scheme achieves $ \mathcal{L} $ - adaptive security. Second, because search tokens are generated by a pseudorandom function bound to user identities, tokens generated by different users for the same keyword are independent and uncorrelated. Therefore, even under collusion attacks, adversaries cannot obtain the search tokens or private information of other authorized users. The experimental evaluation consists of performance analysis and Internet of Vehicles scenario simulation to assess the efficiency and practical applicability of the proposed scheme. In the performance test based on the Intel Core i7 environment, the RDSSE-CR scheme achieves the lowest storage overhead at both the data owner’s and data user’s sides among the compared schemes because both entities only need to maintain their own private keys (Fig. 4). Regarding algorithm performance (Fig. 5), the RDSSE-CR scheme achieves high verification efficiency through efficient XOR operations while maintaining a constant search token size. Although the introduction of security mechanisms slightly increases the update and search costs, the scheme provides improved functionality and security. In the Internet of Vehicles simulation based on Simulation of Urban MObility (SUMO) and OMNeT++, the proposed scheme effectively resists attack interference and enables vehicle queues to maintain stable spacing and consistent speed under attacks (Fig. 6). This prevents vehicle lag and queue collapse observed without the proposed scheme, demonstrating its practical value in improving the safety and stability of the Internet of Vehicles in complex communication environments. Conclusions A verifiable multi-user dynamic searchable symmetric encryption scheme supporting forward and backward privacy is designed to meet the practical requirements of the Internet of Vehicles. To address security threats in multi-user environments where untrusted cloud servers and corrupted users may collude, the proposed scheme implements multi-user authorization based on ID-KEM and effectively resists collusion attacks. The RDSSE-CR scheme ensures system robustness against unreasonable operation requests by constructing a dual bitmap index structure combined with Boolean circuit design. During the search process, the cloud server generates a proof of work based on verification labels, allowing users to verify the correctness and integrity of search results. Future research will focus on efficient user revocation mechanisms to further improve the practicality and security of the scheme.
- Dynamic Searchable Symmetric Encryption (DSSE),
- Collusion resistance,
- Robustness,
- Forward privacy,
- Backward privacy

FullText(HTML)

References(43)

References

[1]	CHEN Liqing, LIU Yu, ZHANG Hao, et al. Multi-authority attribute-based searchable encryption with attribute revocation for Internet of Vehicles[J]. IEEE Transactions on Vehicular Technology, 2026, 75(5): 8522–8533. doi: 10.1109/TVT.2025.3629863.
[2]	SONG D X, WAGNER D, and PERRIG A. Practical techniques for searches on encrypted data[C]. The IEEE Symposium on Security and Privacy, Berkeley, USA, 2000: 44–55. doi: 10.1109/SECPRI.2000.848445.
[3]	CHEN Liqing, LI Jiayi, LI Jiguo, et al. PAESS: Public-key authentication encryption with similar data search for pay-per-query[J]. IEEE Transactions on Information Forensics and Security, 2024, 19: 9910–9923. doi: 10.1109/TIFS.2024.3484155.
[4]	YANG Yunbo, HU Yiwei, LI Ruofan, et al. LSE: Efficient symmetric searchable encryption based on labeled PSI[J]. IEEE Transactions on Services Computing, 2024, 17(2): 563–574. doi: 10.1109/TSC.2024.3356728.
[5]	CHEN Liqing, XU Shiguo, ZHANG Hao, et al. Fair-and-exculpable-attribute-based searchable encryption with revocation and verifiable outsourced decryption using smart contract[J]. IEEE Internet of Things Journal, 2025, 12(4): 4302–4317. doi: 10.1109/JIOT.2024.3484227.
[6]	KAMARA S, PAPAMANTHOU C, and ROEDER T. Dynamic searchable symmetric encryption[C]. The ACM Conference on Computer and Communications Security, Raleigh, USA, 2012: 965–976. doi: 10.1145/2382196.2382298.
[7]	SUN Lixue, XU Chunxiang, and ZHANG Yuan. A dynamic and non-interactive Boolean searchable symmetric encryption in multi-client setting[J]. Journal of Information Security and Applications, 2018, 40: 145–155. doi: 10.1016/j.jisa.2018.03.002.
[8]	KERMANSHAHI S K, LIU J K, STEINFELD R, et al. Multi-client cloud-based symmetric searchable encryption[J]. IEEE Transactions on Dependable and Secure Computing, 2021, 18(5): 2419–2437. doi: 10.1109/TDSC.2019.2950934.
[9]	LI Sensen, HUANG Yicai, FU Zhengxin, et al. Practical multisource–multiclient conjunctive searchable encryption with forward and backward privacy for cloud–IoT[J]. IEEE Internet of Things Journal, 2025, 12(23): 49820–49842. doi: 10.1109/JIOT.2025.3606622.
[10]	ZHANG Hanqi, XU Chang, LU Rongxing, et al. Non-interactive multi-client searchable symmetric encryption with small client storage[J]. IEEE Transactions on Services Computing, 2023, 16(6): 3972–3985. doi: 10.1109/TSC.2023.3301712.
[11]	WANG Beining, LI Yinuo, CHEN Jing, et al. Forward and backward private conjunctive dynamic searchable symmetric encryption with refined leakage function and low communication[J]. IEEE Transactions on Information Forensics and Security, 2025, 20: 8224–8236. doi: 10.1109/TIFS.2025.3592533.
[12]	GUO Cheng, LI Wenfeng, TANG Xinyu, et al. Forward private verifiable dynamic searchable symmetric encryption with efficient conjunctive query[J]. IEEE Transactions on Dependable and Secure Computing, 2024, 21(2): 746–763. doi: 10.1109/TDSC.2023.3262060.
[13]	CHEN Liqing, LI Jiguo, LU Yang, et al. Adaptively secure certificate-based broadcast encryption and its application to cloud storage service[J]. Information Sciences, 2020, 538: 273–289. doi: 10.1016/j.ins.2020.05.092.
[14]	CURTMOLA R, GARAY J, KAMARA S, et al. Searchable symmetric encryption: Improved definitions and efficient constructions[C]. The 13th ACM Conference on Computer and Communications Security, Alexandria, USA, 2006: 79–88. doi: 10.1145/1180405.1180417.
[15]	ZHANG Yupeng, KATZ J, and PAPAMANTHOU C. All your queries are belong to us: The power of file-injection attacks on searchable encryption[C]. The 25th USENIX Conference on Security Symposium, Austin, USA, 2016: 707–720.
[16]	BOST R. Σoϕoς – Forward secure searchable encryption[C]. The 23rd ACM Conference on Computer and Communications Security, Vienna, Austria, 2016: 1143–1154. doi: 10.1145/2976749.2978303.
[17]	BOST R, MINAUD B, and OHRIMENKO O. Forward and backward private searchable encryption from constrained cryptographic primitives[C]. The ACM SIGSAC Conference on Computer and Communications Security, Dallas, USA, 2017: 1465–1482. doi: 10.1145/3133956.3133980.
[18]	PENG Yu, LIU Qin, TIAN Yue, et al. Dynamic searchable symmetric encryption with forward and backward privacy[C]. The 20th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), Shenyang, China, 2021: 420–427. doi: 10.1109/TrustCom53373.2021.00070.
[19]	CHEN Liqing, LI Jiayi, and LI Jiguo. Toward forward and backward private dynamic searchable symmetric encryption supporting data deduplication and conjunctive queries[J]. IEEE Internet of Things Journal, 2023, 10(19): 17408–17423. doi: 10.1109/JIOT.2023.3274390.
[20]	郭宇韬, 柳枫, 王峰, 等. 优化局部性的前向安全动态对称可搜索加密方案[J]. 电子与信息学报, 2025, 47(8): 2780–2790. doi: 10.11999/JEIT250107. GUO Yutao, LIU Feng, WANG Feng, et al. Locality-optimized forward-secure dynamic searchable symmetric encryption[J]. Journal of Electronics & Information Technology, 2025, 47(8): 2780–2790. doi: 10.11999/JEIT250107.
[21]	ZHAO Chenbin, DU Ruiying, HE Kun, et al. Efficient verifiable dynamic searchable symmetric encryption with forward and backward security[J]. IEEE Internet of Things Journal, 2025, 12(3): 2633–2645. doi: 10.1109/JIOT.2024.3470772.
[22]	张文琪, 李雄, 尹智明, 等. 鲁棒的前后向隐私联合对称可搜索加密方案[J]. 软件学报, 2025, 36(8): 3858–3882. doi: 10.13328/j.cnki.jos.007251. ZHANG Wenqi, LI Xiong, YIN Zhiming, et al. Robust scheme for conjunctive symmetric searchable encryption with forward and backward privacy[J]. Journal of Software, 2025, 36(8): 3858–3882. doi: 10.13328/j.cnki.jos.007251.
[23]	ZHU Jie, LI Qi, WANG Cong, et al. Enabling generic, verifiable, and secure data search in cloud services[J]. IEEE Transactions on Parallel and Distributed Systems, 2018, 29(8): 1721–1735. doi: 10.1109/TPDS.2018.2808283.
[24]	SHI Zhenkui, FU Xuemei, LI Xianxian, et al. ESVSSE: Enabling efficient, secure, verifiable searchable symmetric encryption[J]. IEEE Transactions on Knowledge and Data Engineering, 2022, 34(7): 3241–3254. doi: 10.1109/TKDE.2020.3025348.
[25]	李宇溪, 陈晶晶, 周福才, 等. 基于区块链索引的可验证布尔搜索加密方案[J]. 计算机研究与发展, 2025, 62(11): 2855–2869. doi: 10.7544/issn1000-1239.202440501. LI Yuxi, CHEN Jingjing, ZHOU Fucai, et al. Verifiable Boolean searchable encryption scheme based on blockchain index[J]. Journal of Computer Research and Development, 2025, 62(11): 2855–2869. doi: 10.7544/issn1000-1239.202440501.
[26]	GE Yue, GAO Ying, NING Jianting, et al. Verifiable multilevel dynamic searchable encryption with forward and backward privacy in cloud-assisted IoT[J]. IEEE Internet of Things Journal, 2024, 11(24): 40861–40874. doi: 10.1109/JIOT.2024.3457270.
[27]	LI Jiguo, JI Licheng, ZHANG Yicheng, et al. Response-hiding and volume-hiding verifiable searchable encryption with conjunctive keyword search[J]. IEEE Transactions on Computers, 2025, 74(2): 455–467. doi: 10.1109/TC.2024.3485172.
[28]	CHEN Liqing, XU Shiguo, JIN Chunhua, et al. Partially hidden policy attribute-based multi-keyword searchable encryption with verification and revocation[J]. IEEE Transactions on Mobile Computing, 2025, 24(9): 9020–9035. doi: 10.1109/TMC.2025.3558955.
[29]	ZHU Xiaojie, ZHOU Jiancong, DAI Yueyue, et al. A verifiable and efficient symmetric searchable encryption scheme for dynamic dataset with forward and backward privacy[J]. IEEE Transactions on Dependable and Secure Computing, 2025, 22(3): 2741–2755. doi: 10.1109/TDSC.2024.3521423.
[30]	SUN Shifeng, LIU J K, SAKZAD A, et al. An efficient non-interactive multi-client searchable encryption with support for Boolean queries[C]. The 21st European Symposium on Research in Computer Security, Heraklion, Greece, 2016: 154–172. doi: 10.1007/978-3-319-45744-4_8.
[31]	LIU Xueqiao, YANG Guomin, MU Yi, et al. Multi-user verifiable searchable symmetric encryption for cloud storage[J]. IEEE Transactions on Dependable and Secure Computing, 2020, 17(6): 1322–1332. doi: 10.1109/TDSC.2018.2876831.
[32]	CHAMANI J G, WANG Yun, PAPADOPOULOS D, et al. Notice of removal: Multi-user dynamic searchable symmetric encryption with corrupted participants[J]. IEEE Transactions on Dependable and Secure Computing, 2023, 20(1): 114–130. doi: 10.1109/TDSC.2021.3127546.
[33]	WU Panyu, SHEN Jiachen, CAO Zhenfu, et al. MMKFB: Multi-client and multi-keyword searchable symmetric encryption with forward and backward privacy[J]. Frontiers of Computer Science, 2025, 19(3): 193804. doi: 10.1007/s11704-024-3390-z.
[34]	CHEN Liqing, CHEN Shiyu, ZHANG Hao, et al. Fair and verifiable identity-based broadcast proxy re-encryption with designated sender feasible for medical internet of things[J]. IEEE Transactions on Information Forensics and Security, 2025, 20: 6033–6045. doi: 10.1109/TIFS.2025.3578925.
[35]	LI Mingyue, WAN Honggang, DU Ruizhong, et al. Practical collusion-resistant conjunctive dynamic searchable encryption with result pattern hiding[J]. Journal of Information Security and Applications, 2026, 97: 104363. doi: 10.1016/j.jisa.2025.104363.
[36]	黄一才, 李森森, 郁滨. 云环境下对称可搜索加密研究综述[J]. 电子与信息学报, 2023, 45(3): 1134–1146. doi: 10.11999/JEIT211572. HUANG Yicai, LI Sensen, and YU Bin. A survey of symmetric searchable encryption in cloud environment[J]. Journal of Electronics & Information Technology, 2023, 45(3): 1134–1146. doi: 10.11999/JEIT211572.
[37]	牛淑芬, 戈鹏, 董润园, 等. 智能交通系统中具有隐私保护性的属性基可搜索加密方案[J]. 电子与信息学报, 2024, 46(7): 3036–3045. doi: 10.11999/JEIT231074. NIU Shufen, GE Peng, DONG Runyuan, et al. Privacy preseving attribute based searchable encryption scheme in intelligent transportation system[J]. Journal of Electronics & Information Technology, 2024, 46(7): 3036–3045. doi: 10.11999/JEIT231074.
[38]	KARNAUGH M. The map method for synthesis of combinational logic circuits[J]. Transactions of the American Institute of Electrical Engineers, Part I: Communication and Electronics, 1953, 72(5): 593–599. doi: 10.1109/TCE.1953.6371932.
[39]	DOU Haochen, DAN Zhenwu, XU Peng, et al. Dynamic searchable symmetric encryption with strong security and robustness[J]. IEEE Transactions on Information Forensics and Security, 2024, 19: 2370–2384. doi: 10.1109/TIFS.2024.3350330.
[40]	PARK J H, LEE K, and LEE D H. New chosen-ciphertext secure identity-based encryption with tight security reduction to the bilinear Diffie-Hellman problem[J]. Information Sciences, 2015, 325: 256–270. doi: 10.1016/j.ins.2015.07.011.
[41]	ZHAO Chenbin, DU Ruiying, CHEN Jing, et al. Practical multiuser dynamic searchable symmetric encryption with collusion resistance[J]. IEEE Transactions on Reliability, 2025, 74(4): 5119–5132. doi: 10.1109/TR.2025.3575034.
[42]	ZUO Cong, SUN Shifeng, LIU J K, et al. Dynamic searchable symmetric encryption with forward and stronger backward privacy[C]. The 24th European Symposium on Research in Computer Security, Luxembourg, Luxembourg, 2019: 283–303. doi: 10.1007/978-3-030-29962-0_14.
[43]	CHEN Liqing, ZHANG Meng, and LI Jiguo. Conditional identity-based broadcast proxy re-encryption with anonymity and revocation[J]. IEEE Transactions on Reliability, 2025, 74(3): 3573–3584. doi: 10.1109/TR.2024.3521507.