本文为葡萄牙波尔图大学（作者：Rui Araújo）的毕业论文，共125页。

除了使用基于云的服务、基础设施和存储之外，在业务关键型应用程序中使用应用程序日志是当今的标准做法。这些应用程序日志必须以可访问的方式存储，以便在需要时使用。这些应用程序的调试是需要该访问的常见情况。通常，日志记录中包含的部分信息是敏感的。

这项工作提出了一种新的方法，在基于云的存储中存储关键日志，重复使用可搜索加密、反向索引和哈希链接技术，以统一的方式实现所需的隐私、完整性和真实性，同时保持日志所有者的服务器端搜索能力。

所设计的搜索算法支持连接关键字查询以及由字段搜索和嵌套查询支持的细粒度搜索，这在所引用的用例中是必不可少的。据我们所知，本文所提出的解决方案也是第一次引入查询语言，该语言支持复杂的连词关键字和以字段搜索、子查询为后盾的细粒度搜索。

Along side with the use of cloud-based services, infrastructure and storage, the use of application logs in business critical applications is a standard practice nowadays. Such application logs must be stored in an accessible manner in order to used whenever needed. The debugging of these applications is a common situation where such access is required. Frequently, part of the information contained in logs records is sensitive.

This work proposes a new approach of storing critical logs in a cloud-based storage recurring to searchable encryption, inverted indexing and hash chaining techniques to achieve, in a unified way, the needed privacy, integrity and authenticity while maintaining server side searching capabilities by the logs owner.

The designed search algorithm enables conjunctive keywords queries plus a fine-grained search supported by field searching and nested queries, which are essential in the referred use case. To the best of our knowledge, the proposed solution is also the first to introduce a query language that enables complex conjunctive keywords and a fine-grained search backed by field searching and sub queries.

1.       引言

2. 密码学与可搜索加密

3. 相关工作

4. 安全日志服务

5. 验证

6. 结论

更多精彩文章请关注公众号：