| In order to ensure the data security of sensitive information,users usually encrypt data before sending them to the cloud,which increases the difficulty for database management and queries on the encrypted data.In this paper,we propose a security query scheme which can obtain eligible query results without revealing sensitive information.Pseudo random functions and Bloom filters are employed to pre-process keywords of sensitive information to generate the corresponding index data structure.In a query procedure,the client calculates trapdoors and sends it to the server,the server then executes the query according to the trapdoors.Valid trapdoors can only be generated with secret keys by owners and the trapdoors don’t leak any sensitive information.Compared with existing special double layer structure encryption methods,this scheme improves the efficiency and avoids revealing sensitive information during searching on the encrypt database.We carry out experiments with TPC-H developing performance data.Experiment results show that the scheme very efficient in query execution.The scheme has the following features:(1)This scheme does not rely on fully trusted database service providers.(2)Our scheme has strong compatibility,for it allows the user to encrypt sensitive information with various encryption method.(3)The proposed scheme can be against adaptive chosen keyword attack.(4)This scheme supports various number of keywords-query and efficient data update. A Multi-keywords query can be converted into single keyword query problems by concatenating trapdoors of multiple keywords,with the same time complexity. |