Abstract
With the increasing prevalence of outsourcing images to cloud servers, privacy-preserving content-based image retrieval (CBIR) has attracted significant research attention. Existing privacy-preserving CBIR schemes often prioritize retrieval speed by adopting methods that provide weak privacy guarantees and low-dimensional image features, which inevitably compromises security and retrieval accuracy. Additionally, most solutions directly employ CNN models pre-trained on public datasets for feature extraction, neglecting domain adaptation problem. To address these limitations, we propose SecOIR, a secure outsourced image retrieval scheme based on deep hashing networks, which achieves provable security under the semi-honest adversary model while hiding access patterns. Furthermore, domain adaptation is resolved through fine-tuning of feature extraction models. Experimental results demonstrate that SecOIR outperforms state-of-the-art schemes by 11%-12% in accuracy under identical datasets and configurations, while maintaining practical efficiency. To achieve SecOIR, we propose two modified function secret sharing (FSS) schemes that overcome the limited compatibility of the original FSS schemes with replicated secret sharing (RSS). Then, building upon the modified FSS schemes and RSS, we design a series of efficient sub-protocols. Benchmark tests reveal that our sub-protocols surpass existing mainstream solutions in efficiency, which can also serve as independent contributions to secure multi-party computation protocol design.