支持受损数据定位与恢复的动态群用户可证明存储

姜涛; 徐航; 王良民; 马建峰

doi:10.11959/j.issn.2096-109x.2022071

您当前的位置：

首页 >

文章列表页 >

支持受损数据定位与恢复的动态群用户可证明存储

学术论文 | 更新时间：2024-06-03

- 支持受损数据定位与恢复的动态群用户可证明存储
- Proof of storage with corruption identification and recovery for dynamic group users
- 网络与信息安全学报 2022年8卷第5期页码：75-87
- 作者机构：
  
  1. 西安电子科技大学ISN国家重点实验室，陕西西安 710071
  2. 西安电子科技大学网络与信息安全学院，陕西西安 710126
  3. 东南大学网络空间安全学院，江苏南京 211189
- 作者简介：
  
  [ "姜涛（1984- ），男，山东威海人，博士，西安电子科技大学副教授，主要研究方向为密码学与安全协议、大数据存储安全和智能安全" ]
  [ "徐航（1995- ），男，陕西西安人，西安电子科技大学硕士生，主要研究方向为云存储数据安全" ]
  [ "王良民（1977- ），男，安徽潜山人，博士，东南大学教授、博士生导师，主要研究方向为密码学与安全协议、物联网安全、大数据安全" ]
  [ "马建峰（1963- ），男，陕西西安人，博士，西安电子科技大学教授、博士生导师，主要研究方向为计算机系统安全、移动与无线安全、系统可生存性和可信计算" ]
- 基金信息：
  
  中央高校基本科研业务费专项;Fundamental Research Funds for the Central Universities(XJS211502)
- DOI：10.11959/j.issn.2096-109x.2022071
  中图分类号： TP309
- 网络首发：2022-10，
  
  纸质出版：2022-10-15
- 稿件说明：
移动端阅览
姜涛, 徐航, 王良民, 等. 支持受损数据定位与恢复的动态群用户可证明存储[J]. 网络与信息安全学报, 2022,8(5):75-87.

Tao JIANG, Hang XU, Liangmin WANG, et al. Proof of storage with corruption identification and recovery for dynamic group users[J]. Chinese Journal of Network and Information Security, 2022, 8(5): 75-87.
姜涛, 徐航, 王良民, 等. 支持受损数据定位与恢复的动态群用户可证明存储[J]. 网络与信息安全学报, 2022,8(5):75-87. DOI： 10.11959/j.issn.2096-109x.2022071.

Tao JIANG, Hang XU, Liangmin WANG, et al. Proof of storage with corruption identification and recovery for dynamic group users[J]. Chinese Journal of Network and Information Security, 2022, 8(5): 75-87. DOI： 10.11959/j.issn.2096-109x.2022071.

摘要

云计算的外包存储模式导致数据拥有者的数据所有权和管理权分离，进而改变了数据存储网络模型和安全模型。为了有效应对云服务器端的软硬件故障及潜在的不诚实服务提供商，确保数据拥有者数据的可用性，设计安全、高效的数据可用性、可恢复性审计方案对于解决用户担忧、保证云数据安全具有重要的理论和实践价值。然而，现有研究多针对数据完整性或者可恢复性方案的安全性和效率进行设计，没有考虑动态群用户下受损数据的快速定位和可靠恢复问题。因此，针对动态群用户环境中受损数据定位与恢复问题，设计了一个可公开验证的动态群组云用户存储证明方案。该方案在检测到数据受损时，任何可信的第三方审计者能够通过挑战协议快速定位受损数据，并在数据受损程度小于纠错能力门限情况下允许云平台对数据进行可靠恢复。该方案结合关联计算和累加计算，有效减少了受损数据定位的计算次数；通过纠删码与共享编码技术，方案能够实现用户受损数据的有效恢复。同时，方案支持用户的动态撤销，确保了群用户共享数据在用户撤销后的完整性审计和可靠恢复。定义了方案的网络模型和威胁模型，并在相应安全模型下证明了所设计方案的安全性。通过真实环境下的原型系统实现和模块化性能分析，证明了所设计方案能够有效定位受损数据并在数据受损时对云端数据进行可靠恢复。同时，与相关方案相比，所设计方案在受损数据定位与恢复方面的计算开销较小。

Abstract

The outsourced storage mode of cloud computing leads to the separation of data ownership and management rights of data owners

which changes the data storage network model and security model.To effectively deal with the software and hardware failures of the cloud server and the potential dishonest service provider and also ensure the availability of the data owners’ data

the design of secure and efficient data availability and recoverability auditing scheme has both theoretical and practical importance in solving the concern of users and ensuring the security of cloud data.However

most of the existing studies were designed for the security and efficiency of data integrity or recoverability schemes

without considering the fast identification and reliable recovery of damaged data under dynamic group users.Thus

to quickly identify and recover damaged data

a publicly verifiable proof of storage scheme was proposed for dynamic group cloud users.The designed scheme enabled a trusted third-party auditor to efficiently identify the damaged files through a challenge-response protocol and allowed the cloud storage server to effectively recover them when the degree of data damage is less than an error correction ability threshold.The scheme combined association calculation and accumulation calculation

which effectively reduced the number of calculations for the identification of damaged data.By combining erasure coding and shared coding technology

the scheme achieved effective recovery of damaged data of dynamic group users.At the same time

the scheme also supported dynamic user revocation

which ensured the integrity audit and reliable recovery of the collective data after user revocation.The network model and threat model of the designed scheme were defined and the security of the scheme under the corresponding security model was proved.Through the prototype implementation of the scheme in the real environment and the modular performance analysis

it is proved that the proposed scheme can effectively identify the damaged data and reliably recover the cloud data when the data is damaged.Besides

compared with other schemes

it is also proved that the proposed scheme has less computational overhead in identifying and recovering damaged data.

关键词

Keywords

references

ZAFAR F , KHAN A , MALIK S U R , et al . A survey of cloud computing data integrity schemes:Design challenges,taxonomy and future trends [J ] . Comput Secur , 2017 , 65 : 29 - 49 .

GUMASTE P . Amazon aws outage [EB ] .

PAN Y , HU N . Research on dependability of cloud computing systems [C ] // 2014 10th International Conference on Reliability,Maintainability and Safety (ICRMS) . 2014 : 435 - 439 .

SCHROEDER B , GIBSON G A . A large-scale study of failures in high-performance computing systems [J ] . IEEE Trans Dependable Secur Comput , 2010 , 7 ( 4 ): 337 - 351 .

WU D , XIA Y , SUN X S , et al . Masking failures from application performance in data center networks with shareable backup [C ] // Proceedings of the 2018 Conference of the ACM Special Interest Group on Data Communication . 2018 : 176 - 190 .

ATENIESE G , BURNS R C , CURTMOLA R , et al . Provable data possession at untrusted stores [C ] // Proceedings of the 2007 ACM Conference on Computer and Communications Security (CCS 2007) . 2007 : 598 - 609 .

JUELS A , KALISKI B S . Pors:proofs of retrievability for large files [C ] // Proceedings of the 2007 ACM Conference on Computer and Communications Security (CCS 2007) . 2007 : 584 - 597 .

GUO H , ZHANG Z , XU J , et al . Accountable proxy re-encryption for secure data sharing [J ] . IEEE Trans Dependable Secur Comput , 2021 , 18 ( 1 ): 145 - 159 .

SENGUPTA B , RUJ S . Efficient proofs of retrievability with public verifiability for dynamic cloud storage [J ] . IEEE Trans Cloud Comput , 2020 , 8 ( 1 ): 138 - 151 .

SHEN J , ZHOU T , HE D , et al . Block design-based key agreement for group data sharing in cloud computing [J ] . IEEE Trans Dependable Secur Comput , 2019 , 16 ( 6 ): 996 - 1010 .

JIANG T , CHEN X , MA J . Public integrity auditing for shared dynamic cloud data with group user revocation [J ] . IEEE Trans Computers , 2016 , 65 ( 8 ): 2363 - 2373 .

LIU X , MA J , XIONG J , et al . Personal health records integrity verification using attribute based proxy signature in cloud computing [C ] // Internet and Distributed Computing Systems - 6th International Conference (IDCS 2013) . 2013 : 238 - 251 .

ZHANG Y , YU J , HAO R , et al . Enabling efficient user revocation in identity-based cloud storage auditing for shared big data [J ] . IEEE Trans Dependable Secur Comput , 2020 , 17 ( 3 ): 608 - 619 .

BERNSTEIN D J , DOUMEN J , LANGE T , et al . Faster batch forgery identification [C ] // Progress in Cryptology - INDOCRYPT 2012,13th International Conference on Cryptology . 2012 : 454 - 473 .

SHIN S , KIM S , KWON T . Identification of corrupted cloud storage in batch auditing for multi-cloud environments [C ] // Information and Communication Technology-Third IFIP TC 5/8 International Conference (ICT),and 9th IFIP WG 8.9 Working Conference (CONFENIS 2015) . 2015 : 221 - 225 .

MATT B J , . Identification of multiple invalid signatures in pairing-based batched signatures [C ] // Public Key Cryptography - PKC 2009,12th International Conference on Practice and Theory in Public Key Cryptography , 2009 : 337 - 356 .

王惠峰 , 李战怀 , 张晓 , 等 . 云存储中支持失效文件快速查询的批量审计方法 [J ] . 计算机学报 , 2017 , 40 ( 10 ): 2338 - 2351 .

WANG H F , LI Z H , ZHANG X , et al . Batch auditing supporting fast searching invalid files in cloud storage [J ] . Chinese Journal of Computers , 2017 , 40 ( 10 ): 2338 - 2351 .

ZHOU T , TIAN C . Fast erasure coding for data storage:a comprehensive study of the acceleration techniques [C ] // 17th USENIX Conference on File and Storage Technologies (FAST 2019) , 2019 : 317 - 329 .

伍祈应 , 马建峰 , 李辉 , 等 . 支持用户撤销的多关键字密文查询方案 [J ] . 通信学报 , 2017 , 38 ( 8 ): 183 - 193 .

WU Q Y , MA J F , LI H , et al . Multi-keyword search over encrypted data with user revocation [J ] . Journal on Communications , 2017 , 38 ( 8 ): 183 - 193 .

WANG C , CHOW S S M , WANG Q , et al . Privacy-preserving public auditing for secure cloud storage [J ] . IEEE Trans Computers , 2013 , 62 ( 2 ): 362 - 375 .

YU J , REN K , WANG C , et al . Enabling cloud storage auditing with key-exposure resistance [J ] . IEEE Trans Inf Forensics Secur , 2015 , 10 ( 6 ): 1167 - 1179 .

HUO H , JIANG T , TAN S , et al . Efficient public integrity auditing with secure deduplication in cloud computing [J ] . Int J Embed Syst , 2019 , 11 ( 6 ): 764 - 777 .

LI Y , YU Y , MIN G , et al . Fuzzy identity-based data integrity auditing for reliable cloud storage systems [J ] . IEEE Trans Dependable Secur Comput , 2019 , 16 ( 1 ): 72 - 83 .

浏览量

559

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于双联盟链的工业物联网安全数据共享架构

基于属性加密的块级云数据去重方案

多关键词动态可搜索加密方案

基于区块链的多权限属性隐藏电子病历共享方案

基于区块链的数据完整性多方高效审计机制