New Encrypted Image Search Scheme Boosts Speed and Accuracy in the Cloud

Handing your photo library to a cloud provider has always meant a quiet bargain: convenience in exchange for trust. Once images leave your device, the server can, in principle, inspect every pixel, and the metadata attached to each file can reveal far more than most users realize. A research team at Lanzhou University of Technology in China has now reported a scheme that aims to dissolve that bargain, allowing a cloud server to find the images you ask for without ever being able to see what any of them contain. The work, published in the journal Cluster Computing, describes a system called EMG-IR, short for efficient multi-label generation-based image retrieval with privacy-preserving in cloud computing.

The problem the authors tackle is one of the thorniest in applied cryptography and computer vision at once. Content-based image retrieval, or CBIR, is the technology behind searching a collection by visual content rather than by file name or tags. It works by extracting a feature vector from each image, a long list of numbers that summarizes what the picture shows, and then comparing the query’s vector against those stored on the server. But if the server holds the feature vectors in plain form, it effectively holds a compressed description of every image, which is precisely what a privacy-conscious owner wants to hide. Encrypting the vectors, meanwhile, makes them meaningless to the very algorithms that need to measure similarity between them.

Researchers have spent the past decade building privacy-preserving content-based image retrieval, known as PPCBIR, to thread this needle. The field has produced schemes based on order-preserving encryption, randomized locality-sensitive hashing, additive secret sharing, and encrypted vision transformers, among other approaches. Yet the authors of the new study argue that existing designs suffer from a recurring set of weaknesses: an inherent trade-off between security and efficiency, suboptimal retrieval speed, and compromised retrieval accuracy. Protecting features more strongly tends to make searches slower; making searches faster tends to leak information or degrade the quality of the results. EMG-IR is presented as an attempt to break that triangle rather than merely shift along its edges.

The first pillar of the system is a feature extraction stage built on an improved ResNet50, a widely used deep convolutional neural network architecture. The team modified the network by adding a channel attention module, a mechanism that lets the model learn which feature channels, out of the hundreds produced in its deeper layers, matter most for distinguishing the content of an image. Channel attention effectively reweights the network’s internal representations, amplifying informative channels and suppressing noisy ones. The authors acknowledge that this addition increases the number of parameters compared with the original ResNet50, but they report that it delivers a significant improvement in accuracy, a trade they consider worthwhile for a retrieval system whose usefulness depends on finding the right images.

From that backbone, EMG-IR extracts multi-granularity features, meaning descriptors that capture visual information at several levels of detail, from fine local textures to coarse global composition. Multi-granularity representation matters because a single image often contains multiple objects and concepts at different scales; a street scene might include a car, a pedestrian, and an overall urban context, each relevant to a different query. The system then combines these features with a dual-channel hash encoding method to achieve efficient multi-label generation. Hashing, in this context, compresses high-dimensional feature vectors into short binary codes that can be compared with fast bitwise operations, and the dual-channel design lets the model encode complementary semantic information in parallel streams. The result is a compact, multi-label description of each image that supports both accurate matching and rapid search.

The second pillar is the encrypted index. The team designed a multi-label guided hierarchical searchable encrypted index structure, which organizes the encoded images in a tree-like hierarchy whose branches correspond to groups of labels. Instead of scanning every encrypted descriptor for every query, the server can descend the hierarchy, following the labels relevant to the query and pruning entire branches that cannot contain matches. Crucially, this structure is combined with a secure k-nearest neighbor algorithm built on the learning with errors problem, or LWE, a lattice-based hardness assumption widely regarded as resistant to quantum attacks and a cornerstone of modern post-quantum cryptography proposals. The LWE-based mechanism protects the confidentiality of the feature vectors, the index itself, and the query process, so the cloud server learns neither what the images depict nor what the user is looking for.

A third design choice addresses a practical pain point that static encrypted databases have long suffered from: the inability to add new data without rebuilding everything. EMG-IR adopts hierarchical indexing technology to enable dynamic updates of image data, allowing new images to be inserted and existing categories to expand without disrupting the overall structure. In real deployments, image collections grow constantly, and a retrieval scheme that requires re-encrypting and re-indexing the entire corpus after every batch of uploads would be unusable at scale. The hierarchical design gives the system flexibility to adapt to new images and evolving label sets, which the authors present as a key advantage for cloud environments where data is anything but static.

The team evaluated the scheme on two standard public benchmarks: NUS-WIDE, a real-world web image database from the National University of Singapore containing hundreds of thousands of images with multiple labels each, and MS-COCO 2017, Microsoft’s large-scale dataset of common objects in context, which is a standard proving ground for multi-label recognition. Both datasets are publicly available for scientific research, which means other groups can reproduce and stress-test the reported results. The experiments compared EMG-IR against existing comparison schemes on retrieval accuracy, retrieval efficiency, storage cost, and security properties.

The reported numbers are striking. According to the security analysis and experimental evaluation, EMG-IR improves retrieval accuracy by at least 3 percent compared with the comparison scheme, enhances retrieval efficiency by 34 percent, and reduces storage costs by at least 12 percent, while offering higher security. Each of those gains addresses one leg of the security-efficiency-accuracy trade-off that has constrained the field, and the authors argue that the combination, rather than any single metric, is what distinguishes the work. The accuracy gain traces to the attention-enhanced multi-granularity features and the multi-label hashing; the efficiency gain comes from the hierarchical index and compact binary codes; the storage reduction follows from the same compression; and the security improvement stems from the LWE-based encryption covering vectors, index, and queries alike.

The implications reach well beyond personal photo albums. Encrypted image search is a building block for privacy-preserving medical imaging, where hospitals outsource archives to cloud platforms but are bound by confidentiality obligations to patients; for biometric systems, where face or iris templates must never be exposed; for financial and smart healthcare infrastructures in the Internet of Things, where cameras generate sensitive imagery continuously; and for multi-user enterprise settings where different owners share a single cloud repository. Prior work in the field has explored verifiable retrieval, multi-key settings, search-pattern suppression, and traceable search, and EMG-IR adds to that growing toolkit a design that emphasizes dynamic updates and multi-label semantics. The research was supported by the National Natural Science Foundation of China, and the authors declare no competing interests.

Challenges remain before such systems become routine infrastructure. The channel attention module adds parameters and therefore computational cost at feature extraction time, which runs on the data owner’s side before anything is encrypted. Lattice-based secure computation, while theoretically robust, still carries overheads that scale with the dimensionality of the protected vectors, and the balance between code length and accuracy will always require tuning for a given application. Nonetheless, the study offers a concrete demonstration that the long-standing assumption of a rigid trade-off between confidentiality, speed, and accuracy in encrypted image search can be loosened. As cloud storage continues to absorb the world’s visual data, schemes like EMG-IR point toward a future where outsourcing images no longer means surrendering them, and where the server that stores your pictures can find the right one without ever knowing what it is looking at.

Subject of Research: Privacy-preserving content-based image retrieval over encrypted data in cloud computing

Article Title: Efficient multi-label generation-based image retrieval with privacy-preserving in cloud computing

Article References: Chen, Z., Zhang, Q., & Xu, R. (2026). Efficient multi-label generation-based image retrieval with privacy-preserving in cloud computing. Cluster Computing, 29(15), Article 835. https://doi.org/10.1007/s10586-026-06662-0

Image Credits: AI Generated

DOI: 10.1007/s10586-026-06662-0

Keywords: image retrieval, privacy-preserving, cloud computing, searchable encryption, deep hashing, multi-label learning, ResNet50, LWE, k-nearest neighbor, hierarchical index, data confidentiality, hash coding