具有隐式可信第三方的云存储数据持有性审计  

Data possession audit with an implicit trusted third-party for cloud storage

作　　者：安宝宇[1,2] 宫哲[1,2] 肖达[1,2] 谷利泽[1,2] 杨义先[1,2] 

机构地区：[1]北京邮电大学灾备技术国家工程实验室,北京100876 [2]北京邮电大学信息安全中心,北京100876

出　　处：《哈尔滨工程大学学报》2012年第8期1039-1045,共7页Journal of Harbin Engineering University

基　　金：国家自然科学基金资助项目(61003285);北京邮电大学青年科研创新计划专项人才培育基金资助项目(BUPT2011RC0209);国家发改委信息安全专项;中央高校基本科研业务费专项资金资助项目(2012RC0218)

摘　　要：针对远程数据检查给云存储用户带来较大负担的问题,提出了基于隐式可信第三方的数据持有性审计架构.该架构以防篡改可信硬件为隐式可信第三方,代替用户进行数据持有性检查,并生成显篡改日志以供离线审计.架构自身支持公开审计和检查过程中的隐私保护,从而降低了对数据持有性检查算法在这两方面的功能要求.分别基于2个数据持有性检查算法实现了架构,测试结果表明日志引入的开销很小,在不显著牺牲效率的同时,提高了公开审计的可实现性.In order to relieve the burden on cloud storage users caused by remote data checking,a data possession audit architecture was promoted in this paper in which a trusted hardware acted as an implicit trusted third party and carried out data possession checking（DPC） on behalf of the users.The trusted hardware also generated tamper-evident logs which enable offline audits by users.This architecture supports the features of public verification and privacy-preservation,which are therefore not required for the adopted DPC algorithms.Two implementations were given based on two different DPC algorithms,of which the experimental results show that the overheads brought by logs are insignificant,and the feasibility of a public audit is improved without sacrificing efficiency.

关 键 词：云存储 数据持有性审计 可信硬件 显篡改日志 可信第三方 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]