GlusterFS-based Distributed Data Integrity Verification System

doi:10.3969/j.issn.1671-1122.2021.01.009

Abstract

Abstract:

Cloud Storage provides users with a flexible and reliable data storage solution, which enables users to access data stored on the cloud server through network at any time, greatly reducing the cost of data maintenance by users themselves, but it also causes a series of security problems. For cloud storage, it is very important to take audit measures to check the integrity of data, but most of the existing cloud data integrity audit mechanisms only prove the efficiency of the proposed scheme through simulation experiments, and do not analyze and experiment combining with specific cloud storage scenarios. To solve above problems, this paper designs a distributed parallel data audit scheme based on the GlusterFS distributed file system and BLS short signature mechanism, which uses multiple storage nodes of GlusterFS to calculate the corresponding labels of data blocks in parallel, and verify the integrity of data by verifying the integrity of the corresponding labels of data. The scheme realizes single block audit, multi-block audit, multi-user audit and asynchronous audit, and the privacy information of users could not be disclosed. In addition, the security analysis is carried out. The experimental results show that the scheme can achieve efficient parallel auditing of multi-block data, and the concurrent amount can increase linearly with the increase of nodes.

Key words: cloud storage, data auditing, BLS signature, GlusterFS, integrity verification

CLC Number:

TP309

ZHANG Fucheng, FU Shaojing, XIA Jing, LUO Yuchuan. GlusterFS-based Distributed Data Integrity Verification System[J]. Netinfo Security, 2021, 21(1): 72-79.

Figures/Tables 8

References 16

[1]	TAN Shuang, JIA Yan, HAN Weihong. Research and Development of Data Integrity Proof in Cloud Storage[J]. Journal of Computer Science, 2015,38(1); 164-177.
	谭霜, 贾焰, 韩伟红. 云存储中的数据完整性证明研究及进展[J]. 计算机学报, 2015,38(1):164-177.
[2]	ATENIESE G, BURNS R, CURTMOLA R, et al. Provable Data Possession at Untrusted Stores[C] //ACM. The 14th ACM Conference on Computer and Communications Security, October 28-31, 2007, Alexandria, Virginia, USA. New York: ACM, 2007: 598-609.
[3]	ATENIESE G, BURNS R, CURTMOLA R, et al. Remote Data Checking Using Provable Data Possession[J]. ACM Transactions on Information and System Security (TISSEC), 2011,14(1):1-34.
[4]	ERWAY C C, KUPCU A, PAPAMANTHOU C, et al. Dynamic Provable Data Possession[J]. ACM Transactions on Information and System Security (TISSEC), 2015,17(4):213-222.
[5]	BARSOUM A F, HASAN M A. Provable Multicopy Dynamic Data Possession in Cloud Computing Systems[J]. IEEE Transactions on Information Forensics and Security, 2014,10(3):485-497.
[6]	SEBE F, DOMINGO-FERRER J, MARTINEZ-BALLESTE A, et al. Efficient Remote Data Possession Checking in Critical Information Infrastructures[J]. IEEE Transactions on Knowledge and Data Engineering, 2008,20(8):1034-1038.
[7]	ESINER E, KACHKEEV A, BRAUNFELD S, et al. Flexdpdp: Flexlist-based Optimized Dynamic Provable Data Possession[J]. ACM Transactions on Storage(TOS), 2016,12(4):1-44.
[8]	FILHO D L G, BARRETO P S L M. Demonstrating Data Possession and Uncheatable Data Transfer[EB/OL]. http://citeseerx.ist.psu.edu/viewdoc/download;jsessionid=10CE6343574E3365973B3A4313A22827?doi=10.1.1.61.8040&rep=rep1&type=pdf, 2020-01-20.
[9]	HAO Zhuo, ZHONG Sheng, YU Nenghai. A Privacy-preserving Remote Data Integrity Checking Protocol with Data Dynamics and Public Verifiability[J]. IEEE Transactions on Knowledge and Data Engineering, 2011,23(9):1432-1437.
[10]	SHACHAM H, WATERS B. Compact Proofs of Retrievability[EB/OL]. https://www.iacr.org/archive/asiacrypt2008/53500093/53500093.pdf, 2020-01-20.
[11]	ZHU Yan, HU Hongxin, AHN G J, et al. Cooperative Provable Data Possession for Integrity Verification in Multicloud Storage[J]. IEEE Transactions on Parallel and Distributed Systems, 2012,23(12):2231-2244.
[12]	WANG Boyang, LI Baochun, LI Hui, et al. Certificateless Public Auditing for Data Integrity in the Cloud[C] //IEEE. 2013 IEEE Conference on Communications and Network Security (CNS), October 14-16, 2013, National Harbor, MD, USA. NJ: IEEE, 2013: 136-144.
[13]	WANG Huaqun. Proxy Provable Data Possession in Public Clouds[J]. IEEE Transactions on Services Computing, 2013,6(4):551-559.
[14]	YANG Kan, JIA Xiaohua. An Efficient and Secure Dynamic Auditing Protocol for Data Storage in Cloud Computing[J]. IEEE Transactions on Parallel and Distributed Systems, 2012,24(9):1717-1726.
[15]	ZHU Yan, AHN G J, HU Hongxin, et al. Dynamic Audit Services for Outsourced Storages in Clouds[J]. IEEE Transactions on Services Computing, 2011,6(2):227-238.
[16]	WANG Huaqun. Identity-based Distributed Provable Data Possession in Multicloud Storage[J]. IEEE Transactions on Services Computing, 2014,8(2):328-340.

符号	含义
$p$	大素数
$Pg$	加法循环群${{G}_{1}}$和乘法循环群${{G}_{T}}$的生成元
${{H}_{\text{1}}}\text{:}{{\left\{ \text{0,1} \right\}}^{\text{*}}}\to {{\left\{ \text{0,1} \right\}}^{L}}$	消息摘要生成算法,将任意长度输入映射为固定长度输出。该算法可以为MD 5或SHA 256等
${{H}_{\text{2}}}\text{:}{{\left\{ \text{0,1} \right\}}^{k}}\to {{G}_{\text{1}}}$	将k bit的字符串映射为${{G}_{1}}$中某个元素的x坐标,计算出相应的y坐标,从而确定${{G}_{1}}$中该元素的值
$a\text{ }\!\!\|\!\!\text{ }\!\!\|\!\!\text{ }b$	将元素a与b相连接
$\mathbf{Z}_{p}^{\text{*}}\leftarrow x$	从$\mathbf{Z}_{p}^{*}$中随机选择一个元素x
$\hat{e}:{{G}_{\text{1}}}\text{ }\!\!\times\!\!\text{ }{{G}_{\text{1}}}\to {{G}_{T}}$	$\hat{e}$为恒等映射,用于将${{G}_{1}}\times {{G}_{1}}$中的元素映射到${{G}_{T}}$

名称	数量	配置	用途
工作站 1	1	Intel(R) Xeon(R) E5-2640 10核处理器; 20线程2.40 GHz、64 GB内存;3 TB外存	搭建云平台
工作站 2	1	Intel(R) Core(TM) i9-9900X10核处理器; 20线程3.5 GHz、128 GB内存;6 TB外存	搭建云平台
工作站 3	1	Intel(R) Core(TM) i9-7900X 10核处理器; 20线程3.30 GHz、128 GB内存;3.5 TB外存	搭建云平台
PC 机	1	Intel(R) Core(TM) i5-8400处理器;2.80 GHz、8 GB内存;500 GB硬盘	测试终端
交换机	1	1000 Mbps网口速率	连接平台网络