自认证可信云存储框架与算法设计  

Self-certified trusted cloud storage framework and algorithms design

作　　者：肖长水[1,2] 姒茂新[1,2] 傅颖丽[2] 方立刚[1,2] 顾才东[1] 

机构地区：[1]江苏省现代企业信息化应用支撑软件工程技术研发中心,江苏苏州215104 [2]苏州市职业大学计算机工程系,江苏苏州215104

出　　处：《计算机工程与设计》2013年第10期3459-3464,共6页Computer Engineering and Design

基　　金：江苏省自然科学基金项目(BK2012164);苏州市科技计划基金项目(SGZ2011009;SYN201105);江苏省现代企业信息化应用支撑软件工程技术研发中心开放基金项目(SX201201);苏州市职业大学创新团队基金项目(3100124)

摘　　要：为了使用户获得可信的云存储服务,通过对云存储系统的用户数据机密性和数据完整性的数据保护策略进行研究,设计了一个自认证可信的云存储框架。在无第三方参与的情况下用户直接对存储到云存储系统上的数据进行审计,规避了第三方验证的云存储策略的安全风险。在该框架中,设计了两级Merkle哈希树更有效地实现了用户数据安全的读、写、更新等功能,设计了实现以上功能的详细算法。比较分析结果显示,该框架的具有更高的安全性和运行效率。To obtain tusted cloud storage service for customers,data protective strategy based on confidentiality and integrity verification of the customers＇ data is actively studied in the cloud storage system,a framework of self-certified trusted cloud storage is designed,in which the customers can directly audit their data stored in the cloud storage system without the third-party intervention,so that security risk of the third-party verification strategy is avioded.In this framework,two-tier Merkle Hash Tree is designed to effectively implement the functionalities of safely reading,writing,and updating user data.Some detailed steps to implement the designed algorithms are also presented.By analyzing and comparing with known schemes,this framework shows a significantly higher security level and execution efficiency.

关 键 词：可信云存储 Merkle哈希树 可审计性 自认证 信任链 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]