摘要：

针对数据动态更新和群组用户撤销的问题,提出一种新的云端数据完整性验证方案。基于代理重签名技术实现数据所有权的转移和用户的撤销。使用随机掩码技术防止好奇的第三方审计者恢复原始数据块,确保云端数据的隐私性。通过多分支路径树构建简单的认证结构,简 化数据更新过程,从而支持云端数据的插入、修改和删除等更新操作。分析结果表明,该方案满足存在不可伪造性,能抵抗重放攻击和删除攻击。

关键词: 云端存储, 完整性验证, 代理重签名, 多分支路径树, 用户撤销, 数据动态更新

Abstract:

A new integrity verification scheme for cloud data is proposed to solve the problems of dynamic data updating and user revocation.The new scheme uses proxy re-signature to transfer data ownership and revoke users.By using the random masking technique,it can prevent the curious third-party auditor from restoring raw data blocks and ensure privacy of cloud data.In addition,a simple authentication structure is constructed by multi-branch path tree,which simplifies the data update process and supports the update operations such as inserting,modifying and deleting the cloud data.The analysis results show that the proposed scheme satisfies existential unforgeability,and can resist replay attack and deletion attack.

Key words: cloud storage, integrity verification, proxy re-signature, multi-branch path tree, user revocation, dynamic data update

中图分类号: 

• TP309