安全云存储系统与关键技术综述  

Survey of Secure Cloud Storage System and Key Technologies

作　　者：傅颖勋[1] 罗圣美[2] 舒继武[1] 

机构地区：[1]清华大学计算机科学与技术系,北京100084 [2]中兴通讯股份有限公司,南京210012

出　　处：《计算机研究与发展》2013年第1期136-145,共10页Journal of Computer Research and Development

基　　金：国家杰出青年科学基金项目(60925006);国家"八六三"高技术研究发展计划基金项目(2012AA011003);中兴通讯股份有限公司合作项目(One1112300007)

摘　　要：随着云存储的迅猛发展,越来越多的用户选择使用云存储存放自己的资料.云存储的最大特点在于存储即服务,用户可以通过公有API将自己的数据上传到云端保存.但由于用户丧失了对数据的绝对控制权,一些数据安全的隐患也由此产生.为了消除安全隐患,并在保证安全性的同时尽可能地提高系统的服务质量,近年来国内外机构作了大量研究,从而开启了云存储中的一个研究方向——安全云存储系统.首先介绍了云存储系统的安全需求,然后阐述了安全云存储系统的研究现状,并总结了现有安全云存储系统中的一些关键技术的现状与不足之处,其中包括密钥分发与管理、基于属性的加密机制、基于数据密文的搜索机制与删冗机制、数据的持有性证明与恢复以及数据的可信删除等;最后指出了安全云存储系统未来的研究方向.With the rapid development of cloud storage, more and more people prefer to store their owner data in remote cloud storage to avoid troublesome data management in local storage systems. The most famous feature of cloud storage is the concept that storage as a service, users can store their own data into clouds by public APIs. However, because of losing absolute control of data, users storing their own data in cloud storage will suffer a series of security problems, such as data peeping, data tampering, and so on. In order to solute those security problems and improve the quality of secure cloud system based on enhance its security, researchers have investigated lots about cloud security problem in recent years, which established a research branch of the cloud storage- -secure cloud storage system. This paper introduces the security demand of secure cloud storage system; expounds the current status of cloud storage system; summarizes the key technologies of currently secure cloud storage systems, such as encryption key＇s distribution and management, attribute-based encryption, searchable encryption, ciphertext-based data deduplication, provable data possession and proof of retrievability mechanism, data assured delete, etc. At the end of paper we discuss the future research directions of secure cloud storage system.

关 键 词：云存储 安全云存储系统 数据安全 密钥管理 密文搜索 可信删除 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]