不可信网络存储器的有效完整性检测  

Efficient Integrity Checking of Untrustworthy Network Storage

作　　者：赵福祥[1] 

机构地区：[1]西安外事学院工学院,陕西西安710077

出　　处：《西安外事学院学报》2011年第1期87-92,共6页

基　　金：基金项目：本文系国家自然科学基金（No60803151）和省教育专项基金（N02010JK794）资助课题的研究成果.

摘　　要：随着近年来外源存储器趋于实用，用户现在能以相对低廉的价格把大容量的数据保存于各种服务器之上。外源存储系统中的一个重要问题是设计一个方案，以确定用户存在远方的服务器上的数据还未受到窜扰。这篇论文提出了用于验证不可信网络存储设备上文件完整性的基本方法和实际应用原型，其验证处理过程由运行于可行环境的应用程序管理，它仅保存一个固定长度的密码哈希函数值，对应于所认证数据结构的摘要。由于本文所提出的完整性验证方法对所使用的存储技术透明，因而适用各种存储业务。试验结果表明，这个完整性验证方法对网络存储系统是有效的和实用的。Outsourced storage has become more and more practical in recent years. Users can now store large amount of data in multiple servers at a relatively low price. An important issue for outsourced storage systems is to design an efficient scheme to assure users that their data stored at remote servers have not been tampered with. This paper presents a general method and a pratical prototype application tbr verifying the integrity of files in a, untrustworthy network storage service. The verification process is managed by an application running in a trusted environment that stores just one cryptographic hash value of constant size, corresponding to the ＂digest＂ of a, authenticated data structure. The proposed integrity verification service can work with any storage service since it is transparent to the storage technology used. Experimental results show that our integrity verification method is efficient and pratical for network storage systems.

关 键 词：计算机安全 外源存储器 磁盘加密 完整性验证 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP309.7[自动化与计算机技术—计算机科学与技术]