基于洋葱加密模型的同态云平台设计

doi:10.19678/j.issn.1000-3428.0047251

计算机工程 ›› 2018, Vol. 44 ›› Issue (8): 24-29. doi: 10.19678/j.issn.1000-3428.0047251

所属专题：云计算专题；

基于洋葱加密模型的同态云平台设计

李子臣^1,2,3,杨薇²,杨亚涛^2,3,孙亚飞 ^2,3,梁斓^2,3

1.北京印刷学院信息工程学院,北京 102600; 2.北京电子科技学院研究生系,北京 100070; 3.西安电子科技大学通信工程学院,西安 710071

收稿日期:2017-05-18 出版日期:2018-08-15 发布日期:2018-08-15
作者简介:李子臣(1965—),男,教授、博士,主研方向为云计算、密码学;杨薇(通信作者),硕士研究生;杨亚涛,副教授、博士;孙亚飞、梁斓,硕士研究生。
基金资助:
国家自然科学基金(61370188);“十三五”国家密码发展基金(MMJJ20170110)。

Design of Homomorphic Cloud Platform Based on Onion Encryption Model

LI Zichen ^1,2,3,YANG Wei ²,YANG Yatao ^2,3,SUN Yafei ^2,3,LIANG Lan ^2,3

1.College of Information Engineering,Beijing Institute of Graphic Communication,Beijing 102600,China; 2.Department of Graduate Students,Beijing Electronic Science and Technology Institute,Beijing 100070,China; 3.College of Communication Engineering,Xidian University,Xi’an 710071,China

Received:2017-05-18 Online:2018-08-15 Published:2018-08-15

摘要/Abstract

摘要：

在云平台服务端数据解密过程中,容易出现信息泄露、数据库管理员窥探用户隐私信息以及客户端处理任务过重等问题。为此,提出一种基于同态密码的安全云平台设计方案。在满足银行业务处理需求的私有云平台应用场景下,采用可调整洋葱加密策略,利用Paillier加法同态特性和ElGamal乘法同态特性直接操作密文,避免客户端与服务端频繁的交互及加解密处理。仿真实验与效率分析结果表明,该方案在保证运算效率的同时,可有效抵御选择明文攻击。

关键词: 同态运算, 洋葱加密模型, 密文数据库, 同态加密, 私有云

Abstract:

In data decryption process of cloud platform server,it is easy to cause problems of information disclosure,the database administrators spy on users’ privacy information and heavy processing tasks of client.To solve above problems,a design scheme of security private cloud platform based on homomorphic cryptography is proposed.In the private cloud platform scene meeting the demand of bank business processing,by adopting with adjustable onion encryption strategy,ciphertexts can be evaluated directly by additive homomorphism of Paillier and multiplicative homomorphism of ElGamal.Then,frequent interactions between client and server,as well as data encryption and decryption operations can be avoided.Simulation experiment and efficiency analysis results show that the proposed scheme can effectively resist the chosen plaintext attack while ensuring the operation efficiency.

Key words: homomorphic operation, onion encryption model, ciphertext database, homomorphic encryption, private cloud

中图分类号:

TP391.9

李子臣,杨薇,杨亚涛,孙亚飞,梁斓. 基于洋葱加密模型的同态云平台设计[J]. 计算机工程, 2018, 44(8): 24-29.

LI Zichen,YANG Wei,YANG Yatao,SUN Yafei,LIANG Lan. Design of Homomorphic Cloud Platform Based on Onion Encryption Model[J]. Computer Engineering, 2018, 44(8): 24-29.

https://www.ecice06.com/CN/Y2018/V44/I8/24

参考文献

［1］俞能海,郝卓,徐甲甲,等.云安全研究进展综述［J］.电子学报,2013,41(2):371-381.br/ ［2］GHORBEL A,GHORBEL M,JMAIEL M.Privacy in cloud computing environments:a survey and research challenges［J］.Journal of Supercomputing,2017,73(6):2763-2800.br/ ［3］LNGER T,PHLS H C,GHERNAOUTI S.Selected cloud security patterns to improve end user security and privacy in public clouds［M］//SCHIFFNER S,SERNA J,LKONOMOU D,et al.Privacy Technologies and Policy.Berlin,Germany:Springer,2016.br/ ［4］李顺东,窦家维,王道顺.同态加密算法及其在云安全中的应用［J］.计算机研究与发展,2015,52(6):1378-1388.br/ ［5］HRESTAK D,PICEK S.Homomorphic encryption in the cloud［C］//Proceedings of the 37th International Convention on Information and Communication Technology,Electronics and Microelectronics.Opatija,Croatia:［s.n.］,2014:1400-1404.br/ ［6］SHAHZAD F,IQBAL W,BOKHARI F S.On the use of CryptDB for securing electronic health data in the cloud:a performance study［C］//Proceedings of the 17th International Conference on E-health Networking,Application and Services.Boston,USA:［s.n.］,2015:120-125.br/ ［7］TEBAA M,ZKIK K,HAJJI S E.Hybrid homomorphic encryption method for protecting the privacy of banking data in the cloud［J］.International Journal of Security and Its Applications,2015,9(6):61-70.br/ ［8］陈志伟,杜敏,杨亚涛,等.基于RSA和Paillier的同态云计算方案［J］.计算机工程,2013,39(7):35-39.br/ ［9］BONEH D,GENTRY C,HALEVI S,et al.Private database queries using somewhat homomorphic encryption［C］//Proceedings of International Conference on Applied Cryptography and Network Security.Banff,Canada:［s.n.］,2013:102-118.br/ ［10］ZHAO F,LI C,LIU C F.A cloud computing security solution based on fully homomorphic encryption［C］//Proceedings of the 16th International Conference on Advanced Communication Technology.Pyeongchang,South Korea:［s.n.］,2014:485-488.br/ ［11］徐鹏,刘超,斯雪明.基于整数多项式环的全同态加密算法［J］.计算机工程,2012,38(24):1-4.br/ ［12］汤全有,马传贵.针对全同态加密体制的反馈攻击［J］.计算机工程,2014,40(6):79-84.br/ ［13］KANGAVALLI R,VAGDEVI S.A mixed homomorphic encryp-tion scheme for secure data storage in cloud［C］//Proceedings of Advance Computing Conference.Washington D.C.,USA:IEEE Press,2015:1062-1066.br/ ［14］POPA R A,REDFIELD C M S,ZELDOVICH N,et al.CryptDB:processing queries on an encrypted database［J］.Communications of the ACM,2012,55(9):103-111.br/ ［15］CARDELLINI V,IANNUCCI S.Designing a flexible and modular architecture for a private cloud［C］//Proceedings of International Workshop on Virtualization Technologies in Distributed Computing.［S.l.］:USENIX,2012:37-44.br/ ［16］SONG D X,WAGNER D,PERRIG A.Practical techniques for searches on encrypted data［C］//Proceedings of IEEE Symposium on Security and Privacy.Washington D.C.,USA:IEEE Press,2002:44-55.br/ ［17］DIJK M V,GENTRY C,HALEVI S,et al.Fully homo-morphic encryption over the integers［M］//GILBERT H.Advances in Cryptology-EUROCRYPT 2010.Berlin,Germany:Springer,2010:24-43.br/

[1]	王以良, 周鹏, 叶卫, 戚伟强. 基于金字塔网络的非侵入式负荷辨识及其隐私保护方案[J]. 计算机工程, 2024, 50(5): 182-189.
[2]	于莹莹, 丁红发, 蒋合领. 图数据精确最短距离的隐私保护外包计算方案[J]. 计算机工程, 2023, 49(9): 158-171.
[3]	杨越佳, 华蓓, 钟志威, 高咪. 基于同态加密的隐私保护逻辑回归协同计算[J]. 计算机工程, 2023, 49(4): 23-31.
[4]	郑云涛, 叶家炜. 基于茫然传输协议的FATE联邦迁移学习方案[J]. 计算机工程, 2023, 49(2): 24-30.
[5]	张晓均, 张经伟, 黄超, 唐伟. 可验证的云存储医疗加密数据统计分析方案[J]. 计算机工程, 2021, 47(6): 32-37,43.
[6]	王元庆, 刘百祥. 一种去中心化的隐私保护匿名问卷方案[J]. 计算机工程, 2021, 47(6): 123-131.
[7]	李秋贤, 周全兴, 王振龙, 丁红发, 潘齐欣. 基于隐私保护的可证明安全委托计算协议[J]. 计算机工程, 2021, 47(5): 131-137.
[8]	张静, 何铮, 葛炳辉, 汤永利, 叶青. 一种高效的百万富翁问题协议及其应用[J]. 计算机工程, 2021, 47(2): 168-175.
[9]	陈丽燕, 芮廷先, 吕光金. 基于区块链智能合约的个人征信隐私保护方案[J]. 计算机工程, 2020, 46(7): 30-35.
[10]	刘文超, 潘峰, 杨晓元, 周潭平, 涂广升. 基于cuFHE的同态比较运算器[J]. 计算机工程, 2019, 45(9): 143-146,152.
[11]	王彩芬,赵冰,刘超,成玉丹,许钦百. 基于整数多项式环的多对一全同态加密算法[J]. 计算机工程, 2019, 45(4): 130-135.
[12]	李志佳, 夏玮. 基于差值直方图平移的密文域可逆信息隐藏算法[J]. 计算机工程, 2019, 45(11): 152-158.
[13]	沈鑫娣,翟东君,张得天,刘安. 基于LSH的隐私保护POI推荐算法[J]. 计算机工程, 2019, 45(1): 96-102.
[14]	孙霓刚,朱浩然,陈宣任. 一种缩短公钥尺寸的整数上全同态加密方案[J]. 计算机工程, 2018, 44(9): 149-152.
[15]	牛淑芬,田苗,王彩芬,杜小妮. 格上基于同态加密的数据完整性验证方案[J]. 计算机工程, 2018, 44(8): 174-178,183.

选择文件类型/文献管理软件名称

选择包含的内容

基于洋葱加密模型的同态云平台设计

Design of Homomorphic Cloud Platform Based on Onion Encryption Model

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

本文评价

模态框（Modal）标题

选择文件类型/文献管理软件名称

选择包含的内容

基于洋葱加密模型的同态云平台设计

Design of Homomorphic Cloud Platform Based on Onion Encryption Model

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

本文评价