具有紧凑标签的基于身份匿名云审计方案

卢晨昕; 陈兵; 丁宁; 陈立全; 吴戈

doi:10.11959/j.issn.2096-109x.2022087

您当前的位置：

首页 >

文章列表页 >

具有紧凑标签的基于身份匿名云审计方案

学术论文 | 更新时间：2024-06-03

- 具有紧凑标签的基于身份匿名云审计方案
- Identity-based anonymous cloud auditing scheme with compact tags
- 网络与信息安全学报 2022年8卷第6期页码：156-168
- 作者机构：
  
  1. 东南大学网络空间安全学院，江苏无锡 214081
  2. 宿迁市互联网信息办公室，江苏宿迁 223834；
- 作者简介：
  
  [ "卢晨昕（1998- ），女，福建宁德人，东南大学硕士生，主要研究方向为密码学" ]
  [ "陈兵（1970- ），男，江苏泗阳人，宿迁市互联网信息办公室副主任，主要研究方向为网络安全、可信体系建设" ]
  [ "丁宁（1990- ），女，江苏宿迁人，主要研究方向为网络安全、可信体系建设" ]
  [ "陈立全（1976- ），男，广西玉林人，东南大学教授、博士生导师，主要研究方向为信息安全、密码学和网络安全协议" ]
  [ "吴戈（1990- ），男，江苏徐州人，东南大学副研究员，主要研究方向为密码学" ]
- 基金信息：
  
  国家重点研发计划;The National Key R＆D Program of China(2020YFE0200600);国家自然科学基金;The National Natural Science Foundation of China(62002058);江苏省自然科学基金;Natural Science Foundation of Jiangsu Province(BK20200391);中央高校基本科研业务费专项资金;Fundamental Research Funds for the Central Universities(2242021R40011);宿迁市网信领域研究课题;Research Topic in the Network Communicaiton Field in Suqian
- DOI：10.11959/j.issn.2096-109x.2022087
  中图分类号： TP393
- 网络首发：2022-12，
  
  纸质出版：2022-12-15
- 稿件说明：
移动端阅览
卢晨昕, 陈兵, 丁宁, 等. 具有紧凑标签的基于身份匿名云审计方案[J]. 网络与信息安全学报, 2022,8(6):156-168.

Chenxin LU, Bing CHEN, Ning DING, et al. Identity-based anonymous cloud auditing scheme with compact tags[J]. Chinese Journal of Network and Information Security, 2022, 8(6): 156-168.
卢晨昕, 陈兵, 丁宁, 等. 具有紧凑标签的基于身份匿名云审计方案[J]. 网络与信息安全学报, 2022,8(6):156-168. DOI： 10.11959/j.issn.2096-109x.2022087.

Chenxin LU, Bing CHEN, Ning DING, et al. Identity-based anonymous cloud auditing scheme with compact tags[J]. Chinese Journal of Network and Information Security, 2022, 8(6): 156-168. DOI： 10.11959/j.issn.2096-109x.2022087.

摘要

云存储技术具有效率高、可扩展性强等优点。用户可以借助云存储技术节省本地的存储开销，并与他人共享数据。然而，数据存储到云服务器后，用户失去对数据的物理控制，需要有相应的机制保证云中数据的完整性。数据拥有证明（PDP，provable data possession）机制允许用户或用户委托的第三方审计员（TPA，third party auditor）对数据完整性进行验证。但在实际应用中，数据通常由多个用户共同维护，用户在进行完整性验证请求的同时泄露了自己的身份。匿名云审计支持 TPA 在完成数据完整性验证时保证用户的匿名性。在基于身份体制下，匿名云审计方案通常需要借助基于身份的环签名或群签名技术实现，数据标签的构成元素与用户数量相关，使得数据标签不够紧凑，存储效率较低。为了解决这一问题，提出一种基于身份的匿名云审计方案通用构造，使用一个传统体制下的签名方案和一个传统体制下的匿名云审计方案即可构造一个基于身份的匿名云审计方案。基于该通用构造，使用 BLS 签名和一个传统体制下具有紧凑标签的匿名云审计方案设计了具有紧凑标签的基于身份匿名云审计方案。该方案主要优势在于数据标签短，能够减少云服务器的存储压力，提高存储效率。此外，证明了该方案的不可欺骗性和匿名性。

Abstract

Cloud storage has the advantages of high efficiency and scalability.Users can save local storage cost and share data with others through cloud storage technology.However

when data is uploaded to cloud servers

its owner also loses the physical control

and hence there needs a corresponding mechanism to ensure the integrity of data stored in the cloud.The Provable Data Possession (PDP) mechanism allows users or a Third-Party Auditor (TPA) appointed by the user to verify data integrity.In practice

data is usually maintained by multiple users.Users may reveal their identities while making an integrity verification request in traditional auditing processes.Anonymous cloud auditing ensures anonymity of users against the TPA during auditing.Currently

in identity-based systems

anonymous cloud auditing schemes usually resort to identity-based ring signature or group signature schemes.As a result

the size of a tag is related to the number of users

which makes it not compact and causes high storage cost.In order to solve this issue

a general construction of identity-based anonymous cloud auditing scheme was proposed.With a signature scheme and an anonymous cloud auditing scheme

a concrete identity-based anonymous cloud auditing scheme based on the general construction was proposed.It combined theBLS signature and an anonymous cloud auditing scheme with compact tags.The main advantage of this solution is that the tags are compact

which can significantly reduce storage cost and improve storage efficiency.Furthermore

the uncheatability and anonymity of the scheme are proved.

关键词

Keywords

references

BHAJANTRI L B , MUJAWAR T . A survey of cloud computing security challenges,issues and their countermeasures [C ] // 2019 Third International Conference on I-SMAC (IoT in Social,Mobile,Analytics and Cloud) . 2019 : 376 - 380 .

GUDEME J R , PASUPULETI S , KANDUKURI R . Certificateless privacy preserving public auditing for dynamic shared data with group user revocation in cloud storage [J ] . Journal of Parallel and Distributed Computing , 2021 ,( 156 ): 163 - 175 .

RABANINEJAD R , RAJABZADEH ASAAR M , AHMADIAN ATTARI M , et al . An identity-based online/offline secure cloud storage auditing scheme [J ] . Cluster Computing:The Journal of Networks,Software Tools and Applications , 2020 , 23 ( 2 ): 55 - 68 .

DESWARTE Y , QUISQUATER J J , SAÏDANE A . Remote integrity checking [C ] // Integrity and Internal Control in Information Systems VI-IICIS 2003 . 2003 : 1 - 11 .

ATENIESE G , BURNS R , CURTMOLA R , et al . Provable data possession at untrusted stores [C ] // 14th ACM Conference:Computer＆ Communications Security . 2007 : 598 - 609 .

BOYANG W , BAOCHUN L , HUI L . Oruta:privacy-preserving public auditing for shared data in the cloud [J ] . IEEE Transactions on Cloud Computing , 2014 , 2 ( 1 ): 43 - 56 .

FENG Y , MU Y , YANG G , et al . A new public remote integrity checking scheme with user privacy [C ] // 20th Australasian Conference on Information Security and Privacy (ACISP 2015) . 2015 : 377 - 394 .

BOYANG W , HUI L , MING L . Privacy-preserving public auditing for shared cloud data supporting group dynamics [C ] // 2013 IEEE International Conference on Communications-ICC . 2013 : 1946 - 1950 .

BONEH D , GENTRY C , LYNN B , et al . Aggregate and verifiably encrypted signatures from bilinear Maps [C ] // Advances in Cryptology—EUROCRYPT 2003 . 2003 : 416 - 432 .

RIVEST R L , SHAMIR A , TAUMAN Y . How to leak a secret [C ] // Advances in Cryptology— ASIACRYPT 2001 . 2001 : 552 - 565 .

FERRARA A L , GREEN M , HOHENBERGER S , et al . Practical short signature batch verification [C ] // Topics in Cryptology–CT-RSA 2009 . 2009 : 309 - 324 .

BONEH D , BOYEN X , SHACHAM H . Short group signatures [C ] // Advances in Cryptology–CRYPTO 2004 . 2004 : 41 - 55 .

WU G , MU Y , SUSILO W , et al . Privacy-preserving cloud auditing with multiple uploaders [C ] // Information Security Practice and Experience-ISPEC 2016 . 2016 : 224 - 237 .

SHACHAM H , WATERS B . Compact proofs of retrievability [J ] . Journal of Cryptology , 2013 , 26 ( 3 ): 442 - 83 .

SHAMIR A . Identity-based cryptosystems and signature schemes [C ] // Advances in Cryptology—CRYPTO 1984 . 1984 : 47 - 53 .

YU Y , AU M H , ATENIESE G , et al . Identity-based remote data integrity checking with perfect data privacy preserving for cloud storage [J ] . IEEE Transactions on Information Forensics and Security , 2017 , 12 ( 4 ): 767 - 78 .

ZHANG Y , YU J , HAO R , et al . Enabling efficient user revocation in identity-based cloud storage auditing for shared big data [J ] . IEEE Transactions on Dependable and Secure Computing , 2020 , 17 ( 3 ): 608 - 619 .

WENTING S , JING Q , JIA Y , et al . Enabling identity-based integrity auditing and data sharing with sensitive information hiding for secure cloud storage [J ] . IEEE Transactions on Information Forensics and Security , 2019 , 14 ( 2 ): 331 - 46 .

BELLARE M , NAMPREMPRE C , NEVEN G . Security proofs for identity-based identification and signature schemes [J ] . Journal of Cryptology , 2009 , 22 ( 1 ): 1 - 61 .

GALINDO D , HERRANZ J , KILTZ E . On the generic construction of identity-based signatures with additional properties [C ] // Advances in Cryptology–ASIACRYPT 2006 . 2006 : 178 - 193 .

BONEH D , LYNN B , SHACHAM H . Short signatures from the Weil pairing [J ] . Pairings and Their Use in Cryptology , 2004 , 17 ( 4 ): 297 - 319 .

SINGH S , THOKCHOM S . Public integrity auditing for shared dynamic cloud data [C ] // 6th International Conference on Smart Computing and Communications (ICSCC) , 2018 : 698 - 708 .

浏览量

270

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于隐私集合求交的大模型双向隐私授权

基于PIR增强的可搜索加密方案研究

面向LBS的ADS-B报文定位数据本地化差分隐私保护方法

FL-IoV：基于联邦学习的综合车联网入侵检测方法

面向异构数据的半分布式联邦学习安全聚合