基于变长认证跳表的分布式动态数据持有证明模型

doi:10.3969/j.issn.1671-1122.2019.07.008

信息网络安全 ›› 2019, Vol. 19 ›› Issue (7): 67-74.doi: 10.3969/j.issn.1671-1122.2019.07.008

基于变长认证跳表的分布式动态数据持有证明模型

侯林(), 李明洁, 徐剑, 周福才

东北大学软件学院,辽宁沈阳 110169

收稿日期:2019-04-17 出版日期:2019-07-19 发布日期:2020-05-11
作者简介:
作者简介：侯林（1983—）,男,黑龙江,工程师,硕士,主要研究方向为网络与信息安全;李明洁（1992—）,女,辽宁,硕士,主要研究方向为云计算安全;徐剑（1978—）,男,辽宁,副教授,博士,主要研究方向为网络与信息安全、云计算安全;周福才（1964—）,男,吉林,教授,博士,主要研究方向为密码学与网络安全、可信计算、电子商务基础理论与关键技术。
基金资助:
国家自然科学基金[61872069];中央高校基本科研业务费专项资金[N171704005];沈阳市科技计划项目[18-013-0-01]

Distributed Dynamic Provable Data Possession Model Based on Flexible Length-based Authenticated Skip List

Lin HOU(), Mingjie LI, Jian XU, Fucai ZHOU

Software College, Northeastern University, Shenyang Liaoning 110169, China

Received:2019-04-17 Online:2019-07-19 Published:2020-05-11

摘要/Abstract

摘要：

动态数据持有证明（Dynamic Provable Data Possession, DPDP）是云存储中数据完整性验证的重要方法。但是,DPDP在分布式环境中应用时存在代价开销较高、对客户端不透明等问题。为此,文章将变长认证跳表（Flexible Length-based Authenticated Skip List, FlexList）可以很好地支持DPDP动态更新的优势与分布式环境结合,构建了基于FlexList的分布式动态数据持有证明模型（D-DPDP-FlexList）。该模型包括3种实体：中控服务器、存储服务器以及用户。存储服务器和中控服务器构成服务器端,其内部结构对用户是透明的,只通过中控服务器向用户提供服务。因此,用户无需针对服务器结构执行预处理操作,服务器端的可扩展性得到了有效增强。分布式变长认证跳表部署方法和多副本存储方式的采用降低了服务器的响应时间,提高了数据的可用性。文章给出了模型的形式化描述、实体间交互协议以及模型的安全性分析。相关测试验证了文章模型在分布式环境中的可用性。

关键词: 云存储, 数据持有证明, 变长认证跳表, 完整性

Abstract:

Dynamic provable data possession (DPDP) is an important method of data integrity verification in cloud storage. However, DPDP still has some problems when applied in distributed environment, such as high cost, opacity to client and so on. Therefore, this paper uses flexible length-based authenticated skip list (FlexList) which has the advantage of DPDP dynamic updating to construct a distributed dynamic provable data possession model (D-DPDP-FlexList). This model includes three entities which are center control server, storage server and user. Center control server and some storage servers form the server-side. The internal structure of the server-side is transparent to the user and services are provided to users only through the central control server. Users don’t need to preprocess their data according to the structure of the server-side. The adoption of distributed FlexList and multiple-replica storage improves server response time and data availability. This paper also gives the formal description, interaction protocols among the entities and security analysis. Relevant tests verify the availability of the model in distributed environment.

Key words: cloud storage, provable data possession, flexible length-based authenticated skip list, integrity

中图分类号:

TP309

侯林, 李明洁, 徐剑, 周福才. 基于变长认证跳表的分布式动态数据持有证明模型[J]. 信息网络安全, 2019, 19(7): 67-74.

Lin HOU, Mingjie LI, Jian XU, Fucai ZHOU. Distributed Dynamic Provable Data Possession Model Based on Flexible Length-based Authenticated Skip List[J]. Netinfo Security, 2019, 19(7): 67-74.

图/表 6

参考文献 17

[1]	TAN Shuang, JIA Yan, HAN Weihong.Research and Development of Provable Data Integrity in Cloud Storage[J]. Chinese Journal of Computers, 2015, 38(1): 164-177.
	谭霜,贾焰,韩伟红.云存储中的数据完整性证明研究及进展[J].计算机学报,2015,38(1):164-177.
[2]	LI Bo, HUANG Yanyu, LIU Zheli, et al.HybridORAM: Practical Oblivious Cloud Storage with Constant Bandwidth[J].Information Sciences, 2019, 479: 651-663.
[3]	LV Congdong, HAN Zhen, MA Wei.Design and Implementation of Data Storage Encryption Mechanism in Cloud Storage[J]. Netinfo Security, 2014, 14(6): 1-5.
	吕从东,韩臻,马威.云存储服务端数据存储加密机制的设计和实现[J].信息网络安全,2014,14(6):1-5.
[4]	STANEK J, KENCL L.Enhanced Secure Thresholded Data Deduplication Scheme for Cloud Storage[J]. IEEE Transactions on Dependable and Secure Computing, 2018, 15(4): 694-707.
[5]	LEI Lei,CAI Quanwei, JING Jiwu,et al. Enforcing Access Controls on Encrypted Cloud Storage with Policy Hiding[J]. Journal of Software, 2016, 27(6): 1432-1450.
	雷蕾,蔡权伟,荆继武,等.支持策略隐藏的加密云存储访问控制机制[J].软件学报,2016,27(6):1432-1450.
[6]	PENG Su, ZHOU Fucai, XU Jian, et al.Comments on Identity-Based Distributed Provable Data Possession in Multicloud Storage[J]. IEEE Transactions on Services Computing, 2016, 9(6): 996-998.
[7]	ZHAO Yang, CHEN Yang, XIONG Hu, et al.A Revocable Authorization Provable Data Possession Scheme in Clouds[J]. Netinfo Security, 2015, 15(8): 1-7.
	赵洋,陈阳,熊虎,等.云环境下一种可撤销授权的数据拥有性证明方案[J].信息网络安全,2015,15(8):1-7.
[8]	JUELS A, KALISKI Jr B S. PORs: Proofs of Retrievability for Large Files[C]//ACM. The 14th ACM Conference on Computer and Communications Security, October 29-November 2, 2007, Alexandria, Virginia, USA. New York: ACM, 2007: 584-597.
[9]	ATENIESE G, BURNS R, CURTMOLA R, et al.Provable Data Possession at Untrusted Stores[C]// ACM. The 14th ACM Conference on Computer and Communications Security, October 29-November 2, 2007, Alexandria, Virginia, USA. New York: ACM, 2007: 598-609.
[10]	SHACHAM H, WATERS B.Compact Proofs of Retrievability[J]. Journal of Cryptology, 2012, 26(3): 442-483.
[11]	ATENIESE G, PIETRO R D, MANCINI L V, et al.Scalable and Efficient Provable Data Possession[C]//ACM. The 4th International Conference on Security and Privacy in Communication Netowrks, September 22-25, 2008, Istanbul, Turkey. New York: ACM, 2008.
[12]	ERWAY C,>KÜP04Ü A,PAPAMANTHOU C, et al. Dynamic Provable Data Possession[C]//ACM. The 16th ACM Conference on Computer and Communications Security, November 9-13, 2009, Illinois, USA. New York: ACM, 2009: 213-222.
[13]	ESINER E, KACHKEEV A, BRAUNFELD S, et al.FlexDPDP: FlexList-based Optimized Dynamic Provable Data Possession[J]. ACM Transactions on Storage, 2016, 12(4): 1-44.
[14]	CURTMOLA R, KHAN O, BURNS R, et al.MR-PDP: Multiple-replica Provable Data Possession[C]//IEEE. The 28th International Conference on Distributed Computing Systems, July 17-20, 2008, Beijing, China. NJ: IEEE, 2008: 411-420.
[15]	BARSOUM A F, HASAN M A. On Verifying Dynamic Multiple Data Copies over Cloud Servers[EB/OL]. , 2011-8-15.
[16]	ZHU Yan, HU Hongxin, AHN G J, et al.Cooperative Provable Data Possession for Integrity Verification in Multicloud Storage[J]. IEEE Transactions on Parallel & Distributed Systems, 2012, 23(12): 2231-2244.
[17]	XU Jian, LI Mingjie, LI Fuxiang, et al.Optimized Algorithms for Flexible Length-Based Authenticated Skip List[J]. China Communications, 2016, 13(1): 124-138.

基于变长认证跳表的分布式动态数据持有证明模型

Distributed Dynamic Provable Data Possession Model Based on Flexible Length-based Authenticated Skip List

RichHTML

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

图/表 6

参考文献 17

相关文章 15

编辑推荐

Metrics

本文评价

[1]	李晓冉, 郝蓉, 于佳. 具有数据上传管控的无证书可证明数据持有方案[J]. 信息网络安全, 2020, 20(1): 83-88.
[2]	刘建华, 郑晓坤, 郑东, 敖章衡. 基于属性加密且支持密文检索的安全云存储系统[J]. 信息网络安全, 2019, 19(7): 50-58.
[3]	秦中元, 韩尹, 张群芳, 朱雪金. 一种改进的多私钥生成中心云存储访问控制方案[J]. 信息网络安全, 2019, 19(6): 11-18.
[4]	邵必林, 李肖俊, 边根庆, 赵煜. 云存储数据完整性审计技术研究综述[J]. 信息网络安全, 2019, 19(6): 28-36.
[5]	黑一鸣, 刘建伟, 张宗洋, 喻辉. 基于区块链的可公开验证分布式云存储系统[J]. 信息网络安全, 2019, 19(3): 52-60.
[6]	李帅, 刘晓洁, 徐兵. 一种基于目录哈希树的磁盘数据同步方法研究[J]. 信息网络安全, 2019, 19(2): 53-59.
[7]	陈瑞滢, 陈泽茂, 王浩. 工业控制系统安全监控协议的设计与优化研究[J]. 信息网络安全, 2019, 19(2): 60-69.
[8]	赵星, 王晓东, 张串绒. 一种基于数据漂移的动态云安全存储机制[J]. 信息网络安全, 2019, 19(10): 65-73.
[9]	秦中元, 韩尹, 朱雪金. 基于改进DGHV算法的云存储密文全文检索研究[J]. 信息网络安全, 2019, 19(1): 8-8.
[10]	柏建丽, 李晓冉, 郝蓉, 于佳. 云环境下基于代数签名的支持所有权动态变更的安全审计和去冗方案[J]. 信息网络安全, 2018, 18(8): 50-55.
[11]	鲁秀青, 咸鹤群. 云存储中基于用户授权的大数据完整性审计方案[J]. 信息网络安全, 2018, 18(4): 32-37.
[12]	郁湧, 陈长赓, 刘强, 刘嘉熹. 基于构件的软件系统信任链模型和信任关系分析[J]. 信息网络安全, 2018, 18(3): 8-13.
[13]	马苗立, 张洪波, 丁卫颖. 基于字节级优化更新的云存储增量式网络编码方法研究[J]. 信息网络安全, 2018, 18(11): 18-26.
[14]	周悦, 王威, 宋红波, 何泾沙. 云平台下数据完整性验证方案设计[J]. 信息网络安全, 2018, 18(11): 57-65.
[15]	赵萌, 丁勇, 王玉珏. 指定审计员的云数据安全存储方案[J]. 信息网络安全, 2018, 18(11): 66-72.