基于更新树的动态云数据审计方案

doi:10.3969/j.issn.1671-1122.2015.12.001

信息网络安全 ›› 2015, Vol. 15 ›› Issue (12): 1-7.doi: 10.3969/j.issn.1671-1122.2015.12.001

基于更新树的动态云数据审计方案

赵洋, 任化强(), 熊虎, 陈阳

电子科技大学信息与软件工程学院,四川成都 610054

收稿日期:2015-07-28 出版日期:2015-12-20 发布日期:2016-01-04
作者简介:
作者简介：赵洋（1973—）,男,四川,副教授,博士,主要研究方向为网络安全;任化强（1990—）,男,安徽,硕士研究生,主要研究方向为网络安全;熊虎（1982—）,男,四川,副教授,博士,主要研究方向为网络安全;陈阳（1985—）,男,湖北,硕士研究生,主要研究方向为网络安全。
基金资助:
国家自然科学基金[61472064];国家高科技研究发展计划（国家863计划）[2015AA016007]

A Dynamic Cloud Data Audit Scheme Based on Update Tree

ZHAO Yang, REN Huaqiang(), XIONG Hu, CHEN Yang

School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu Sichuan 610054, China

Received:2015-07-28 Online:2015-12-20 Published:2016-01-04

摘要/Abstract

摘要：

由于云服务器是半可信的,为了保证云数据的完整性和正确性,用户需要定期对云中数据进行审计,同时云服务器也要支持用户对云数据进行动态操作。文章提出了一个新的更新树结构用于实现动态的数据完整性审计。方案中的更新树存有数据块的版本号、序号范围、偏移量,序号范围的设置使得更新树具有一个节点存储多个数据块的属性。相同版本号和偏移量的连续序号具保存在一个更新树节点中,这样大大减少了存储空间和访问时间。在动态审计过程中,系统可以根据序号和偏移量来对签名时的数据块号进行验证。对云中大量连续数据块进行修改时,更新树只需更新一次含有相应数据块序号范围的更新树节点,更新树不平衡时可根据二叉平衡树的原理进行调整。更新树节点存放的是一定范围的数据块属性,使得更新树的大小不与文件数据块个数成正比,而与用户对文件更新次数相关,从而方案对动态云数据的审计性能不会根据文件大小的增长而变低。最后通过安全性分析和性能分析可以看出,文中方案是一个高效安全的动态云数据审计方案。

关键词: 云存储安全, 动态云数据审计, 更新树

Abstract:

The cloud server is partially trusted. In order to ensure the completeness and correctness of the cloud data, users need to periodically audit the cloud data. At the same time the cloud server should also support user to update the cloud data dynamic. The provable dynamic cloud data possession scheme via update tree came up with a new update tree structure which is used to realize dynamic data integrity audit plan. The update trees exist a version number of data blocks, the range of serial number, the offset, the setting of range makes the trees don’t have to use a node to store the attribute of a single block of data. The continuous serial number with same version and offset can be stored in a node to the update tree, and it greatly reduces the storage space and access time. In the dynamic audit process, the system can be according to the serial number and offset to determine the data block number in signature for validation. At the same time when the user updates the data blocks for a range, it only needs to update the tree node which the range in it. When the update tree is not balance, it can be adjusted according to the principle of balanced binary tree. The update tree node stores attributes for a range of data blocks, and this characteristic makes the size of the tree affected by the times of dynamic operations not by the file size, and thus the performance of the audit will not step down when the file size become large. By the security and performance analysis which in the end of this article, we can be seen that this scheme is an efficient security provable dynamic cloud data possession scheme.

Key words: cloud storage security, dynamic cloud data audit, update tree

中图分类号:

TP309

赵洋, 任化强, 熊虎, 陈阳. 基于更新树的动态云数据审计方案[J]. 信息网络安全, 2015, 15(12): 1-7.

ZHAO Yang, REN Huaqiang, XIONG Hu, CHEN Yang. A Dynamic Cloud Data Audit Scheme Based on Update Tree[J]. Netinfo Security, 2015, 15(12): 1-7.

图/表 4

参考文献 22

[1]	DESWARTE Y, QUISQUATER J J, SAÏDANE A. Remote Integrity Checking[C]//IFIP. Sixth Working Conference on Integrity and Internal Control in Information Systems (IICIS), November 13-14, 2003, Lausanne, Switzerland. US: Springer, 2003: 1-11.
[2]	OPREA A, REITER M K, YANG K.Space-Efficient Block Storage Integrity[C]//Internet Society. Network and Distributed System Security Symposium, NDSS 2005, February 3-4, 2005, California, USA. USA: NDSS, 2005: 1-12.
[3]	FILHO D L G, BARRETO P S L M. Demonstrating Data Possession and Uncheatable Data Transfer[EB/OL]. .
[4]	SEBE F, MARTINEZ-BALLESTE A, DESWARTE Y, et al.Time-bounded Remote File Integrity Checking[R]. Tarragona: UNIVERSITAT ROVIRA I VIRGILI, Tech.Rep.04429, 2004.
[5]	SCHWARZ T S J, MILLER E L. Store, Forget, and Check: Using Algebraic Signatures to Check Remotely Administered Storage[C]//IEEE. Distributed Computing Systems, ICDCS 2006, 26th IEEE International Conference on, July 4-7, 2006, Lisboa. Washington, USA: IEEE, 2006: 12.
[6]	ATENIESE G, BURNS R, CURTMOLA R, et al.Provable Data Possession at Untrusted Stores[C]//ACM. 14th ACM Conference on Computer and Communications Security, October 28-31, 2007, Alexandria, Virginia, USA. New York: ACM, 2007: 598-609.
[7]	ATENIESE G, KAMARA S, KATZ J.Proofs of Storage from Homomorphic Identification Protocols[C]//INTERNATIONAL ASSOCIATION FOR CRYPTOLOGIC RESEARCH. Advances in Cryptology-ASIACRYPT 2009, December 6-10, 2009, Tokyo, Japan. Heidelberg: Springer, 2009: 319-333.
[8]	JUELS A, KALISKI JR B S. PORs: Proofs of Retrievability for Large Files[C]//ACM. 14th ACM Conference on Computer and Communications Security, October 29-November 2, 2007, Alexandria, Viginia, USA. New York: ACM, 2007: 584-597.
[9]	ATENIESE G, PIETRO R D, MANCINI L V, et al.Scalable and Efficient Provable Data Possession[C]// IACR. 4th International Conference on Security and Privacy in Communication Networks, September 22-25, 2008, Istanbul, Turkey. New York: ACM, 2008: 9.
[10]	ERWAY C, KÜPÇÜ A, PAPAMANTHOU C, et al. Dynamic Provable Data Possession[C]//ACM. 16th ACM Conference on Computer and Communications Security, November 9-13, 2009, Chicago. New York: ACM, 2009: 213-222.
[11]	WANG Qian, WANG Cong, LI Jin, et al.Enabling Public Verifiability and Data Dynamics for Storage Security in Cloud Computing[C]//Information Security Group. 14th European Symposium on Research in Computer Security, September 21-23, 2009, Saint-Malo. Heidelberg: Springer, 2009: 355-370.
[12]	WANG Cong, WANG Qian, REN Kui, et al.Privacy-preserving Public Auditing for Data Storage Security in Cloud Computing[C]//IEEE. 29th IEEE International Conference on Computer Communications, March 14-19, 2010, San Diego. USA: IEEE, 2010: 1-9.
[13]	ZHU Yan, WANG Huaixi, HU Zexing, et al.Dynamic Audit Services for Integrity Verification of Outsourced Storages in Clouds[C]//ACM. 2011 ACM Symposium on Applied Computing, March 21-24, 2011, Taiwan. New York: ACM, 2011: 1550-1557.
[14]	YANG Kan, JIA Xiaohua.An Efficient and Secure Dynamic Auditing Protocol for Data Storage in Cloud Computing[J]. Parallel and Distributed Systems, IEEE Transactions on, 2013, 24(9): 1717-1726.
[15]	MALKANI P, ELLARD D, LEDLIE J, et al.Passive NFS Tracing of Email and Research Workloads[C]//USENIX. 2nd USENIX Conference on File and Storage Technologies, March 31-April 2, 2003, San Francisco. Berkeley: USENIX, 2003: 203-216.
[16]	秦志光,包文意,赵洋,等. 云存储中一种模糊关键字搜索加密方案[J]. 信息网络安全,2015(6):7-12.
[17]	BOWERS K D, JUELS A, OPREA A.Proofs of Retrievability: Theory and Implementation[C]// ACM. 2009 ACM Workshop on Cloud Computing Security, November 13, 2009, Chicago. New York: ACM, 2009: 43-54.
[18]	唐春明,郑晓龙. 云计算中一种对大群组用户的隐私保护公共审计方案[J]. 信息网络安全,2015(2):19-25.
[19]	CHANG E C, XU Jia.Remote Integrity Check with Dishonest Storage Server[C]//Information Security Group. 13th European Symposium on Research in Computer Security, October 6-8, 2008, Málaga, Spain. Lodon: Information Security Group, 2008: 223-237.
[20]	秦志光,吴世坤,熊虎. 云存储服务中数据完整性审计方案综述[J]. 信息网络安全,2014(7):1-6.
[21]	BOWERS K D, JUELS A, OPREA A.HAIL: A High-availability and Integrity Layer for Cloud Storage[C]//ACM. 16th ACM Conference on Computer and Communications Security,November 9-13, 2009, Chicago. New York: ACM, 2009: 187-198.
[22]	BONEH D, LYNN B, SHACHAM H.Short Signatures from the Weil Pairing[J]. Journal of Cryptology, 2004, 17(4): 297-319.

基于更新树的动态云数据审计方案

A Dynamic Cloud Data Audit Scheme Based on Update Tree

RichHTML

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

图/表 4

参考文献 22

相关文章 1

编辑推荐

Metrics

本文评价