云平台数据完整性混合验证方案

doi:10.19678/j.issn.1000-3428.0056404

计算机工程 ›› 2020, Vol. 46 ›› Issue (10): 46-51. doi: 10.19678/j.issn.1000-3428.0056404

云平台数据完整性混合验证方案

毛向杰, 张品

杭州电子科技大学通信工程学院, 杭州 310018

收稿日期:2019-10-25 修回日期:2019-12-24 发布日期:2020-01-13
作者简介:毛向杰(1994-),男,硕士研究生,主研方向为云存储安全;张品,副教授。
基金资助:
国家自然科学基金（61772516）；浙江省"钱江人才计划"项目（2013R10071）。

Hybrid Verification Scheme for Data Integrity of Cloud Platform

MAO Xiangjie, ZHANG Pin

School of Communication Engineering, Hangzhou Dianzi University, Hangzhou 310018, China

Received:2019-10-25 Revised:2019-12-24 Published:2020-01-13

摘要/Abstract

摘要： 目前的云数据完整性验证方案多使用单一验证方法，用户数据性质的多样性导致其难以满足所有的用户需求。针对该问题，提出一种混合的云数据完整性验证方案。对于动态数据和静态数据分别选用不同的审计方法，基于BLS签名实现高效静态验证，通过多分支路径树进行动态验证，以满足不同类型的数据完整性验证需求。性能分析与实验结果表明，该方案能够降低系统整体的计算开销与通信代价，并有效提高验证效率。

关键词: 云数据, 数据完整性, BLS签名, 多分支树, 动态验证

Abstract: Most of existing verification schemes for cloud data integrity use a single verification method,but the diversity of user data makes it difficult to meet all user requirements.To solve the problem,this paper proposes a hybrid verification scheme for cloud data integrity.The scheme adopts different audit methods for dynamic data and static data,using BLS signature for efficient static verification and Large Branching Tree(LBT) for dynamic verification,so as to meet different kinds of data integrity verification requirements.Performance analysis and experimental results show that the proposed scheme can reduce the overall computational overhead and communication cost of the system,and improve the verification efficiency.

Key words: cloud data, data integrity, BLS signature, Large Branching Tree(LBT), dynamic verification

中图分类号:

TP309.2

毛向杰, 张品. 云平台数据完整性混合验证方案[J]. 计算机工程, 2020, 46(10): 46-51.

MAO Xiangjie, ZHANG Pin. Hybrid Verification Scheme for Data Integrity of Cloud Platform[J]. Computer Engineering, 2020, 46(10): 46-51.

https://www.ecice06.com/CN/Y2020/V46/I10/46

图/表 7

20201023091403

20201023091407

20201023091410

20201023091414

20201023091417

20201023091422

20201023091425

参考文献

[1] MELL P,GRANCE T.The NIST definition of cloud computing[EB/OL].[2019-09-20]. https://www.nist.gov/publications/nist-definition-cloud-computing?pub_id=909616.
[2] ARMBRUST M,FOX A,GRIFFITH R,et al.A view of cloud computing[J].Communications of the ACM,2010,53(4):50-58.
[3] TAN Shuang,JIA Yan,HAN Weihong.Research and development of provable data integrity in cloud storage[J].Chinese Journal of Computers,2015,38(1):164-177.(in Chinese)谭霜,贾焰,韩伟红.云存储中的数据完整性证明研究及进展[J].计算机学报,2015,38(1):164-177.
[4] JIANG Xiaoqing,WANG Qinruo.Cold data storage technology in big data environment[J].Industrial Control Computer,2016,29(6):58-60.(in Chinese)姜晓青,王钦若.大数据环境下冷数据存储技术概述[J].工业控制计算机,2016,29(6):58-60.
[5] MACHANAVAJJHALA A,KIFER D,GEHRKE J,et al.l-diversity:privacy beyond k-anonymity[J].ACM Transactions on Knowledge Discovery from Data,2007,1(1):34-46.
[6] SWEENEY L.k-anonymity:a model for protecting privacy[J].International Journal on Uncertainty Fuzziness and Knowledge Based Systems,2002,10(5):557-570.
[7] JUELS A,KALISKI B S.PORs:proofs of retrievability for large files[C]//Proceedings of the 14th ACM Conference on Computer and Communications Security.New York,USA:ACM Press,2007:584-597.
[8] ATENIESE G,BURNS R,CURTMOLA R,et al.Provable data possession at untrusted stores[C]//Proceedings of the 14th ACM Conference on Computer and Communications Security.New York,USA:ACM Press,2007:598-609.
[9] SHAH M A,SWAMINATHAN R,BAKER M,et al.Privacy-preserving audit and extraction of digital contents:HPL-2008-32R1[R].Palo Alto,USA:HP Labs,2008.
[10] DESWARTE Y,QUISQUATER J J,SAÏDANE A.Remote integrity checking[C]//Proceedings of Working Conference on Integrity and Internal Control in Information Systems.Berlin,Germany:Springer,2003:1-11.
[11] SHACHAM H,WATERS B.Compact proofs of retrievability[C]//Proceedings of the 14th International Conference on the Theory and Application of Cryptology and Information Security.Melbourne,Australia:[s.n.],2008:90-107.
[12] BONEH D,LYNN B,SHACHAM H.Short signatures from the Weil pairing[C]//Proceedings of the 7th International Conference on the Theory and Application of Cryptology and Information Security.Gold Coast,Australia:[s.n.],2001:514-532.
[13] ZHOU Rui,WANG Xiaoming.Integrity verifying algorithm for cloud data based on homomorphic hash function[J].Computer Engineering,2014,40(6):64-69.(in Chinese)周锐,王晓明.基于同态哈希函数的云数据完整性验证算法[J].计算机工程,2014,40(6):64-69.
[14] ATENIESE G,PIETRO R,MANCINI L V,et al.Scalable and efficient provable data possession[C]//Proceedings of the 4th International Conference on Security and Privacy in Communication Networks.New York,USA:ACM Press,2008:1-10.
[15] GARG N,BAWA S.RITS-MHT:relative indexed and time stamped Merkle hash tree based data auditing protocol for cloud computing[J].Journal of Network and Computer Applications,2017,84:1-13.
[16] WANG Huaqun.Proxy provable data possession in public clouds[J].IEEE Transactions on Services Computing,2013,6(4):551-559.
[17] ERWAY C,KÜPCV A,PAPAMANTHOU C,et al.Dynamic provable data possession[C]//Proceedings of the 16th ACM Conference on Computer and Communications Security.New York,USA:ACM Press,2009:213-222.
[18] LI Yong,YAO Ge,LEI Linan,et al.LBT-based cloud data integrity verification scheme[J].Journal of Tsinghua University(Science and Technology),2016,56(5):504-510.(in Chinese)李勇,姚戈,雷丽楠,等.基于多分支路径树的云存储数据完整性验证机制[J].清华大学学报(自然科学版),2016,56(5):504-510.
[19] WU Yinghao,LING Jie.An improved data integrity verification method for cloud storage[J].Computer Engineering,2019,45(3):36-40.(in Chinese)吴颖豪,凌捷.一种改进的云存储数据完整性验证方法[J].计算机工程,2019,45(3):36-40.
[20] ZHOU Yue,WANG Wei,SONG Hongbo,et al.Design of data integrity verification scheme under cloud platform[J].Netinfo Security,2018,18(11):57-65.(in Chinese)周悦,王威,宋红波,等.云平台下数据完整性验证方案设计[J].信息网络安全,2018,18(11):57-65.

选择文件类型/文献管理软件名称

选择包含的内容

云平台数据完整性混合验证方案

Hybrid Verification Scheme for Data Integrity of Cloud Platform

RichHTML

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

图/表 7

参考文献

相关文章 15

编辑推荐

Metrics

本文评价

[1]	郑鹏, 沙乐天. 基于混合分析的Java反序列化漏洞检测方法[J]. 计算机工程, 2023, 49(12): 136-145.
[2]	都繁杰, 李静, 郭志勇, 任颖文, 尹晓宇, 董小菱. 基于瓶颈感知的多级反馈队列Coflow调度机制[J]. 计算机工程, 2022, 48(10): 193-201,211.
[3]	陶谦, 熊风光, 刘涛, 况立群, 韩燮, 梁振斌, 常敏. 多幅点云数据与纹理序列间的自动配准方法[J]. 计算机工程, 2020, 46(10): 259-265,274.
[4]	吴颖豪,凌捷. 一种改进的云存储数据完整性验证方法[J]. 计算机工程, 2019, 45(3): 36-40.
[5]	刘开南. 云数据中心基于任务映射的虚拟机选择策略[J]. 计算机工程, 2019, 45(10): 33-39.
[6]	杨小东,安发英,杨苗苗,杨平,王彩芬. 支持多授权中心与属性变更的云访问控制方案[J]. 计算机工程, 2018, 44(8): 1-6.
[7]	牛淑芬,田苗,王彩芬,杜小妮. 格上基于同态加密的数据完整性验证方案[J]. 计算机工程, 2018, 44(8): 174-178,183.
[8]	孙旭,温蜜,张栩,周波. 智能电网中一种动态数据完整性验证方案[J]. 计算机工程, 2017, 43(8): 38-43.
[9]	朱建新,沈东羽,吴钪. 基于激光点云的智能挖掘机目标识别[J]. 计算机工程, 2017, 43(1): 297-302.
[10]	王谦,熊书明. 一种面向移动云存储的可验证访问控制方案[J]. 计算机工程, 2016, 42(5): 35-41.
[11]	王惠峰,李战怀,张晓,孙鉴,赵晓南. 支持并发更新的云存储数据持有性审计方法[J]. 计算机工程, 2016, 42(2): 15-20.
[12]	牛淑芬,王彩芬,张玉磊,曹素珍. 多源网络编码数据完整性验证方案[J]. 计算机工程, 2015, 41(3): 21-25.
[13]	王蒙,刘小平,邹艳妮. 大规模点云数据的球面纹理映射方法[J]. 计算机工程, 2015, 41(1): 218-222.
[14]	周锐，王晓明. 基于同态哈希函数的云数据完整性验证算法[J]. 计算机工程, 2014, 40(6): 64-69.
[15]	刘婷婷, 赵勇. 一种隐私保护的多副本完整性验证方案[J]. 计算机工程, 2013, 39(7): 55-58.

模态框（Modal）标题

选择文件类型/文献管理软件名称

选择包含的内容

云平台数据完整性混合验证方案

Hybrid Verification Scheme for Data Integrity of Cloud Platform

RichHTML

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

图/表 7

参考文献

相关文章 15

编辑推荐

Metrics

本文评价