Abstract: To address challenges of data confidentiality, dynamic authorization, and efficient retrieval in Underwater Acoustic Sensor Networks (UASNs), a searchable authorized keyword encryption scheme with dual-layer security is proposed. At the data layer, leveraging quantum resistance of the Small Integer Solution (SIS) problem and Identity-Based Encryption (IBE), an anti-quantum public-key encryption mechanism using lattice trapdoor algorithms is developed. At the authorization layer, a time-constrained discrete Gaussian token distribution protocol generates lightweight authorization signatures through lattice-based rejection sampling, allowing authorities to dynamically assign and update fine-grained keyword search permissions. Authorized nodes utilize generated authorization trapdoors for precise data retrieval. Lattice basis expansion algorithms enhance computational efficiency, while integration with IBE simplifies public key management, aligning the scheme with UASNs' low bandwidth and limited computing resources. The proposed scheme ensures quantum security, reduces communication overhead, and rigorous analyses confirm its IND-sID-CKA and T-EUF security properties, fulfilling the demands of underwater acoustic communications.

摘要： 针对水声传感器网络（UASN）中数据机密性、动态授权与高效检索的协同难题，提出了一种面向水声传感器网络的可搜索授权关键字加密方案，方案采用双重安全机制。在数据层，结合小整数解（SIS）问题的抗量子特性与身份基加密（IBE）框架，设计基于格基陷门算法的抗量子安全公钥加密机制，实现了抗量子攻击的公钥加密；在授权层，提出时间约束的离散高斯令牌分发协议，利用格基拒绝采样技术生成轻量级授权签名，支持权威机构按需授予节点细粒度关键词搜索权限，实现权限动态撤销与更新，合法节点通过生成的授权陷阱门实现细粒度检索。技术实现中，通过格基扩展算法优化格基运算效率，结合IBE方案简化公钥管理流程，使方案适配水声传感器节点的低带宽与有限计算特性。在实现授权搜索的同时保障量子安全性，同时还有效降低了通信开销。最后，进行了详细且严格的正确性分析和安全性证明，证明所提出的方案实现了IND-sID-CKA和T-EUF安全性，满足水下声学通信中低带宽和有限计算能力的需求。