摘要： 为使用户能够及时判断云数据的完整性状态，并且在损坏小于一定程度时修复数据，提出一种隐私保护的多副本完整性验证方案。基于Parakh秘密共享方案设计多副本机制，保证数据的可取回性。将用户身份信息与可用数据隔离存储，通过存储认证码建立身份信息与拆分数据块之间的映射关系，使攻击者无法建立可用数据与用户之间的联系。基于多示证方的零知识证明思想，设计挑战-应答协议，使用户能及时判断云端数据是否完整，并确定出错的数据服务器。分析结果表明，该方案可提高用户存储空间的利用率，保护用户的身份隐私，较好地解决了云计算外包服务模式和云服务商可信性不易评估引起的数据问题。

关键词: 云存储, 云安全, 数据安全, 可取回性证明, 数据完整性验证

Abstract: To make users check the integrity of cloud data in time and retrieve the data even when some part of the data are destroyed, a privacy-preserving multi-copy integrity verification scheme is proposed. The multi-copy mechanism is raised based on Parakh secret sharing scheme to ensure the data retrievability. A segment mechanism is presented to separate user’s identity information and the available data. The storage authentication code is designed to establish contact between data and its owner which prevent the attackers obtaining the relationship between the user and his data. A challenge-response protocol is proposed based on multi-prover zero-knowledge proof. Analysis shows that the scheme is space efficient for cloud servers and protects the identity privacy against attackers, which resolves the problems arose by the outsource service mode of cloud computing and by the untrustworthiness of the cloud service provider.

Key words: cloud storage, cloud security, data security, Proof of Retrievability(POR), data integrity verification

中图分类号: 

• TP309.2