Design of Data Integrity Verification Scheme under Cloud Platform

doi:10.3969/j.issn.1671-1122.2018.11.008

Abstract

Abstract:

Deploying the detection system on the cloud platform helps to improve the efficiency of the detection party and the detected party and reduce the detection cost. Because of the shortages of cloud platform and because the whole data interaction process needs to be transmitted through the network, it is impossible to ensure the security of data. The most common way to solve the security problem of application data on cloud platform is to verify the integrity of remote data. This paper designs a data integrity verification scheme on cloud platform by using the classical technology of verifying the integrity of remote data in cloud environment and combining the characteristics of data under cloud platform and the characteristics of data interaction. The scheme adopts a hybrid strategy to ensure that both the detection and the detected data can meet the requirements of integrity verification. Performance analysis shows that the computational and communication costs of the scheme are lower than those of the scheme using a single strategy.

Key words: cloud platform, data integrity, dynamic variability

CLC Number:

TP309

Yue ZHOU, Wei WANG, Hongbo SONG, Jingsha HE. Design of Data Integrity Verification Scheme under Cloud Platform[J]. Netinfo Security, 2018, 18(11): 57-65.

Figures/Tables 12

References 11

[1]	ZHAO Yang, CHEN Yang, XIONG Hu,et al.A Revocable Authorization Provable Data Possession Scheme in Clouds[J].Netinfo Security,2015,15(8):1-7.
	赵洋,陈阳,熊虎,等. 云环境下一种可撤销授权的数据拥有性证明方案[J]. 信息网络安全,2015, 15(8):1-7.
[2]	DESWARTE Y, QUISQUATER J J, SAÏDANE A. Remote Integrity Checking[M]// Springer. Integrity and Internal Control in Information Systems VI. Boston:Springer, Boston, MA, 2003:1-11.
[3]	ATENIESE G, BURNS R, CURTMOLA R, et al.Provable data possession at untrusted stores[C]//ACM.The 14th ACM Conference on Computer and Communications Security, October 29 - November 2, 2007, Alexandria, Virginia, USA.New Yrok:ACM, 2007: 598-609.
[4]	JUELS A, Burton S Kaliski Jr. PORs: Proofs of Retrievability for Large Files[C]//ACM.The 14th ACM Conference on Computer and Communications Security, October 29 - November 2, 2007, Alexandria, Virginia, USA.New Yrok:ACM, 2007:584-597.
[5]	QIN Zhiguang,WU Shikun,XIONG hu. A Review on Data Integrity Auditing Protocols for Data Storage in Cloud Computing[J].Netinfo security,2014,14(7):1-6.
	秦志光, 吴世坤, 熊虎. 云存储服务中数据完整性审计方案综述[J]. 信息网络安全, 2014, 14(7):1-6.
[6]	WANG Huaquan.Proxy Provable Data Possession in Public Clouds[J]. IEEE Transactions on Services Computing, 2013, 6(4):551-559.
[7]	WANG Boyang, CHOW S S M, LI Ming, et al. Storing Shared Data on the Cloud via Security-mediator[C] //IEEE.2013 IEEE 33rd International Conference on Distributed Computing Systems, July 8-11, 2013, Philadelphia, PA, USA.NJ:IEEE, 2013:124-133.
[8]	WANG Huaqun, ZHANG Yuqing.On the Knowledge Soundness of a Cooperative Provable Data Possession Scheme in Multicloud Storage[J]. IEEE Transactions on Parallel and Distributed Systems, 2014, 25(1):264-267.
[9]	WANG Huaqun, WU Qianhong, QIN Bo, et al.Identity-based Remote Data Possession Checking in Public Clouds[J]. IET Information Security, 2014, 8(2):114-121.
[10]	ZHOU Jingzhe, CHEN Changsong.Analysis of Network Information Security in the Cloud Computing Architecture[J].Netinfo Security,2017, 17(11): 74-79.
	周靖哲, 陈长松. 云计算架构的网络信息安全对策分析[J]. 信息网络安全, 2017, 17(11): 74-79.
[11]	WANG Huaqun.Identity-based Distributed Provable Data Possession in Multicloud Storage[J]. IEEE Transactions on Services Computing, 2015, 8(2):328-340.

符号	运算类型
E	幂运算
Mod	模运算
H	哈希运算
M	乘法运算

基本方案名称	标签生成	证明值生成	完整性验证
PDP	2nE	cE+cM	(c+2)E+cM+MOD
DPDP	2nE	cE+cM	(c+2)E+cM+MOD

基本方案名称	第一次验证挑战	第二次验证挑战	第一次响应	第二次响应
PDP	r₁	cL	640+2580	r₂
DPDP	r₁	cL	640+2580	r₂