• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

计算机工程与科学 ›› 2024, Vol. 46 ›› Issue (03): 453-462.

• 计算机网络与信息安全 • 上一篇    下一篇

身份加密多云多副本完整性审计协议

张逢1,2,3,文斌1,2,3,闫一非1,2,3,曾昭武1,2,3,周伟1,2,3   

  1. (1.海南师范大学信息科学技术学院,海南 海口 571158;2.海南师范大学云计算与大数据研究中心,海南 海口 571158;
    3.数据科学与智慧教育教育部重点实验室(海南师范大学),海南 海口 571158)
  • 收稿日期:2023-07-14 修回日期:2023-09-05 接受日期:2024-03-25 出版日期:2024-03-25 发布日期:2024-03-15
  • 基金资助:
    国家自然科学基金 (62362029);海南省自然科学基金 (623RC485);海南省研究生创新科研课题(Qhys2022-266)

An identity-encryption multi-cloud multi-copy integrity auditing protocol

ZHANG Feng1,2,3,WEN Bin1,2,3,YAN Yi-fei1,2,3,ZENG Zhao-wu1,2,3,ZHOU Wei1,2,3   

  1. (1.School of Information Science and Technology,Hainan Normal University,Haikou 571158;
    2.Cloud Computing and Big Data Research Center,Hainan Normal University,Haikou 571158;
    3.Key Laboratory of Data Science and Smart Education,
    Ministry of Education(Hainan Normal University),Haikou 571158,China)
  • Received:2023-07-14 Revised:2023-09-05 Accepted:2024-03-25 Online:2024-03-25 Published:2024-03-15

摘要: 为解决现有可证明数据持有(PDP)协议只适用于单云存储服务器且过度依赖公钥基础设施的问题,提出一种新的基于身份的多云多副本PDP协议。该协议采用身份加密来简化证书管理,并设计双层默克尔哈希树作为新的安全数据结构,以维护多副本的新鲜性和一致性。安全性分析和实验结果均验证了该协议具备安全性和高效性,能够在多个云存储服务器上实现多副本完整性审计,并在标签生成、证据生成和证据验证3个阶段的效率上明显优于对比算法。

关键词: 云存储, 数据完整性审计, 多云服务器, 多副本, 身份加密

Abstract: To solve the problems of existing provable data possession (PDP) protocols only applicable to single cloud storage servers and over-reliance on public key infrastructure, a new identity-based multi-cloud multi-replica PDP protocol is proposed. This protocol adopts identity encryption to simplify certificate management, and designs a double-layer Merkle hash tree as a new secure data structure to maintain the freshness and consistency of multi-replica. Security analysis and experimental results verify the security and efficiency of this protocol, which can achieve multi-replica integrity auditing on multiple cloud storage servers, and significantly outperform the efficiency of comparison algorithms in the three stages of tag generation, evidence generation, and evidence verification.

Key words: cloud storage, data integrity auditing, multi-cloud servers, multi-copy, identity encryption