NaEPASC：一种新颖且高效的云数据公开审计机制

Shuang TAN; Yan JIA

doi:10.1631/jzus.C1400045

Your Location：

Home >

Browse articles >

NaEPASC：一种新颖且高效的云数据公开审计机制

云工程 | Updated：2022-05-19

- NaEPASC：一种新颖且高效的云数据公开审计机制
- NaEPASC: a novel and efficient public auditing scheme for cloud data
- 信息与电子工程前沿（英文） 2014年15卷第9期页码：794-804
- Affiliations：
  
  School of Computer, National University of Defense Technology, Changsha 410073, China
- Author bio：
  
  [ "Shuang TAN, E-mail: tanshuang@nudt.edu.cn" ]
  [ "Yan JIA, E-mail:jiayanjy@vip.sina.com" ]
- Funds：
  
  Project supported by the National Natural Science Foundation of China (Nos. 60933005 and 91124002), the National High-Tech R&D Program (863) of China (Nos. 2010AA012505, 2011AA010702, 2012AA01A401, and 2012AA01A402), the National 242 Foundation (No. 2011A010), and the National Technology Support Foundation (Nos. 2012BAH38B04 and 2012BAH38B06)
- DOI：10.1631/jzus.C1400045
  中图分类号： TP309.2
- 收稿：2014-02-09，
  
  修回：2014-;8-11，
  
  纸质出版：2014-09
- Accepted：
Scan QR Code
NaEPASC：一种新颖且高效的云数据公开审计机制[J]. 信息与电子工程前沿（英文）, 2014,15(9):794-804.

Shuang TAN, Yan JIA. NaEPASC: a novel and efficient public auditing scheme for cloud data[J]. Frontiers of Information Technology & Electronic Engineering, 2014, 15(9): 794-804.
NaEPASC：一种新颖且高效的云数据公开审计机制[J]. 信息与电子工程前沿（英文）, 2014,15(9):794-804. DOI： 10.1631/jzus.C1400045.

Shuang TAN, Yan JIA. NaEPASC: a novel and efficient public auditing scheme for cloud data[J]. Frontiers of Information Technology & Electronic Engineering, 2014, 15(9): 794-804. DOI： 10.1631/jzus.C1400045.

摘要

研究目的

随着云计算的广泛深入，越来越多用户选择云来存储数据。由于用户在本地可能不再保存任何数据副本，云中数据的完整性难以有效判定。另外，同一用户可能需要存储多份数据到云中，因此简化密钥管理也成为一个关键问题。本文尝试设计一种满足云存储环境的、基于身份的数据完整性验证机制，以检测云中数据的正确性。

创新要点

参考基于身份的签名机制，提出一种基于身份的数据完整性验证模型，包括私钥生成服务器、用户、云存储服务器及第三方审计。该机制不仅能够有效检测数据完整性，而且简化了用户密钥管理，包括密钥恢复和密钥存储。另外，协议采用的公钥为用户公开的信息，如邮件等。

重要结论

本文设计的验证机制能够有效检测云中侵犯用户数据完整性的违规行为。通过考虑用户身份信息，简化了用户的密钥管理，也减轻了第三方审计者的审计负担。安全证明和安全试验表明NaEPASC是一种安全、高效的完整性验证机制。

Abstract

Cloud computing is deemed the next-generation information technology (IT) platform

in which a data center is crucial for providing a large amount of computing and storage resources for various service applications with high quality guaranteed. However

cloud users no longer possess their data in a local data storage infrastructure

which would result in auditing for the integrity of outsourced data being a challenging problem

especially for users with constrained computing resources. Therefore

how to help the users complete the verification of the integrity of the outsourced data has become a key issue. Public verification is a critical technique to solve this problem

from which the users can resort to a third-party auditor (TPA) to check the integrity of outsourced data. Moreover

an identity-based (ID-based) public key cryptosystem would be an efficient key management scheme for certificate-based public key setting. In this paper

we combine ID-based aggregate signature and public verification to construct the protocol of provable data integrity. With the proposed mechanism

the TPA not only verifies the integrity of outsourced data on behalf of cloud users

but also alleviates the burden of checking tasks with the help of users' identity. Compared to previous research

the proposed scheme greatly reduces the time of auditing a single task on the TPA side. Security analysis and performance evaluation results show the high efficiency and security of the proposed scheme.

关键词

Keywords

references

G. Ateniese , , , R. Burns , , , R. Curtmola , , , 等 . . Provable data possession at untrusted stores . . Proc. 14th ACM Conf. on Computer and Communications Security , , 2007 . . p.598 - - 609 . . DOI: 10.1145/1315245.1315318 http://doi.org/10.1145/1315245.1315318 . .

G. Ateniese , , , Pietro R. di , , , L.V. Mancini , , , 等 . . Scalable and efficient provable data possession . . Proc. 4th Int. Conf. on Security and Privacy in Communication Networks, Article 9 , , 2008 . . DOI: 10.1145/1460877.1460889 http://doi.org/10.1145/1460877.1460889 . .

G. Ateniese , , , R. Burns , , , R. Curtmola . . Remote data checking using provable data possession . . ACM Trans. Inform. Syst. Secur. , , 2011 . . 14 ( ( 1 ): ): 1 - - 12 . . DOI: 10.1145/1952982.1952994 http://doi.org/10.1145/1952982.1952994 . .

D. Boneh , , , X. Boyen . . Efficient selective-ID secure identity-based encryption without random oracles . . Advances in Cryptology-EUROCRYPT , , 2004 . . p.223 - - 238 . . . .

D. Boneh , , , M. Franklin . . Identity-based encryption from the weil pairing . . Advances in CryptologyCRYPTO , , 2001 . . p.213 - - 229 . . . .

D. Boneh , , , X. Boyen , , , E.J. Goh . . Hierarchical identity based encryption with constant size ciphertext . . Advances in Cryptology-EUROCRYPT , , 2005 . . p.440 - - 456 . . DOI: 10.1007/11426639_26 http://doi.org/10.1007/11426639_26 . .

B. Chen , , , R. Curtmola . . Robust dynamic provable data possession . . 32nd Int. Conf. on Distributed Computing Systems Workshops , , 2012 . . p.515 - - 525 . . DOI: 10.1109/ICDCSW.2012.57 http://doi.org/10.1109/ICDCSW.2012.57 . .

C. Erway , , , A. Kupcu , , , C. Papamanthou , , , 等 . . Dynamic provable data possession . . Proc. 16th ACM Conf. on Computer and Communications Security , , 2009 . . p.213 - - 222 . . DOI: 10.1145/1653662.1653688 http://doi.org/10.1145/1653662.1653688 . .

Gartner . . Gartner Identifies the Top 10 Strategic Technologies for 2011 . . Available from Available from , , 2010 . . http://www.gartner.com/newsroom/id/1454221 http://www.gartner.com/newsroom/id/1454221 , , . .

C. Gentry , , , Z. Ramzan . . Identity-based aggregate signatures . . Public Key Cryptography , , 2006 . . p.257 - - 273 . . . .

C. Gentry , , , A. Silverberg . . Hierarchical ID-based cryptography . . Advances in Cryptology-CRYPTO , , 2002 . . p.548 - - 566 . . . .

Z. Hao , , , S. Zhong , , , N.H. Yu . . A privacy-preserving remote data integrity checking protocol with data dynamics and public verifiability . . IEEE Trans. Knowl. Data Eng. , , 2011 . . 23 ( ( 9 ): ): 1432 - - 1437 . . DOI: 10.1109/TKDE.2011.62 http://doi.org/10.1109/TKDE.2011.62 . .

K. Hashizume , , , D.G. Rosado , , , E. Fernandez-Medina , , , 等 . . An analysis of security issues for cloud computing . . J. Internet Serv. Appl. , , 2013 . . 4 5 DOI: 10.1186/1869-0238-4-5 http://doi.org/10.1186/1869-0238-4-5 . .

P. Hochmuth , , , C. Richmond , , , S. Hudson , , , 等 . . 2013 U.S. Cloud Security Survey. Technical Report No. 242836, International Data Corporation (IDC), USA . . Available from , , 2013 . . http://www.idc.com/getdoc.jsp?containerId=242836 http://www.idc.com/getdoc.jsp?containerId=242836 , , . .

A. Juels , , , B.S.Jr Kaliski . . Pors: proofs of retrievability for large files . . Proc. 14th ACM Conf. on Computer and Communications Security , , 2007 . . p.584 - - 597 . . DOI: 10.1145/1315245.1315317 http://doi.org/10.1145/1315245.1315317 . .

A. Khan , , , M.L.M. Kiah , , , S.U. Khan , , , 等 . . A study of incremental cryptography for security schemes in mobile cloud computing environments . . IEEE Symp. on Wireless Technology and Applications , , 2013a . . p.62 - - 67 . . DOI: 10.1109/ISWTA.2013.6688818 http://doi.org/10.1109/ISWTA.2013.6688818 . .

A. Khan , , , M. Othman , , , S.A. Madani , , , 等 . . A survey of mobile cloud computing application models . . IEEE Commun. Surv. Tutor. , , 2013b . . 16 ( ( 1 ): ): 393 - - 413 . . DOI: 10.1109/SURV.2013.062613.00160 http://doi.org/10.1109/SURV.2013.062613.00160 . .

F. Lokantas , , , H.S. Salonu . . IDC's Cloud Computing and Datacenter Roadshow 2013 . . Available from , , 2013 . . http://idc-cema.com/eng/events/50527-idc-scloud-computing-and-datacenter-roadshow-2013 http://idc-cema.com/eng/events/50527-idc-scloud-computing-and-datacenter-roadshow-2013 , , . .

P. Mell , , , T. Grance . . The NIST Definition of Cloud Computing . . Technical Report No. SP 800-145, National Institute of Standards and Techninology (NIST), USA , , 2009 . . .

T. Ristenpart , , , E. Tromer , , , H. Shacham , , , 等 . . Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds . . Proc. 16th ACM Conf. on Computer and Communications Security , , 2009 . . p.199 - - 212 . . DOI: 10.1145/1653662.1653687 http://doi.org/10.1145/1653662.1653687 . .

H. Shacham , , , B. Waters . . Compact proofs of retrievability . . Advances in Cryptology-ASIACRYPT , , 2008 . . p.90 - - 107 . . . .

H. Shacham , , , B. Waters . . Compact proofs of retrievability . . J. Cryptol. , , 2013 . . 26 ( ( 3 ): ): 442 - - 483 . . DOI: 10.1007/s00145-012-9129-2 http://doi.org/10.1007/s00145-012-9129-2 . .

A. Shamir . . Identity-based cryptosystems and signature schemes . . Advances in Cryptology-ASIACRYPT , , 1985 . . p.47 - - 53 . . DOI: 10.1007/3-540-39568-7_5 http://doi.org/10.1007/3-540-39568-7_5 . .

C. Wang , , , Q. Wang , , , K. Ren , , , 等 . . Ensuring data storage security in cloud computing . . 17th Int. Workshop on Quality of Service , , 2009 . . p.1 - - 9 . . DOI: 10.1109/IWQoS.2009.5201385 http://doi.org/10.1109/IWQoS.2009.5201385 . .

C. Wang , , , Q. Wang , , , K. Ren , , , 等 . . Privacypreserving public auditing for data storage security in cloud computing . . Proc. IEEE INFOCOM , , 2010 . . p.1 - - 9 . . DOI: 10.1109/INFCOM.2010.5462173 http://doi.org/10.1109/INFCOM.2010.5462173 . .

C. Wang , , , Q. Wang , , , K. Ren , , , 等 . . Toward secure and dependable storage services in cloud computing . . IEEE Trans. Serv. Comput. , , 2012 . . 5 ( ( 2 ): ): 220 - - 232 . . DOI: 10.1109/TSC.2011.24 http://doi.org/10.1109/TSC.2011.24 . .

C. Wang , , , S. Chow , , , Q. Wang , , , 等 . . Privacypreserving public auditing for secure cloud storage . . IEEE Trans. Comput. , , 2013 . . 62 ( ( 2 ): ): 362 - - 375 . . DOI: 10.1109/TC.2011.245 http://doi.org/10.1109/TC.2011.245 . .

Q. Wang , , , C. Wang , , , J. Li , , , 等 . . Enabling public verifiability and data dynamics for storage security in cloud computing . . Computer Security-ESORICS , , 2009 . . p.355 - - 370 . . DOI: 10.1007/978-3-642-04444-1_22 http://doi.org/10.1007/978-3-642-04444-1_22 . .

B. Waters . . Efficient identity-based encryption without random oracles . . Advances in CryptologyEUROCRYPT , , 2005 . . p.114 - - 127 . . DOI: 10.1007/11426639_7 http://doi.org/10.1007/11426639_7 . .

Y. Zhu , , , H.X. Hu , , , G.J. Ahn , , , 等 . . Collaborative integrity verification in hybrid clouds . . 7th Int. Conf. on Collaborative Computing: Networking, Applications and Worksharing (CollaborateCom) , , 2011a . . p.191 - - 200 . . . .

Y. Zhu , , , H.X. Wang , , , Z.X. Hu , , , 等 . . Zero-knowledge proofs of retrievability . . Sci. China Inform. Sci. , , 2011b . . 54 ( ( 8 ): ): 1608 - - 1617 . . DOI: 10.1007/s11432-011-4293-9 http://doi.org/10.1007/s11432-011-4293-9 . .

浏览量

Downloads

CSCD

文章被引用时，请邮件提醒。

Submit

工具集

关联资源

暂无数据