一种应用于网络硬盘存储系统的安全模块技术  

Security Module Technique Applied to Online Storage System

作　　者：石彦博[1] 傅颖勋[2] 刘青昆[1] 舒继武[2] 

机构地区：[1]辽宁师范大学计算机与信息技术学院,辽宁大连116081 [2]清华大学计算机科学与技术系,北京100084

出　　处：《小型微型计算机系统》2014年第6期1253-1257,共5页Journal of Chinese Computer Systems

摘　　要：近年来,网络硬盘系统得到了快速地推广和普及,而频发的网盘提供商泄漏用户数据的事件却表明:现有的许多网盘系统在保护用户数据安全方面仍然存在着较大的缺陷.本文提出并实现了一种高效便捷的网盘系统安全模块(security module of online storage system),使得加载此模块后的网络硬盘系统能够为用户提供数据私密性、数据完整性和访问控制权限等功能.为了保证网盘系统的独立性,本安全模块采用松耦合的设计方式,并引入第三方认证中心以加强网盘系统的权威性.除此之外,本安全模块还采用了分散式密钥管理、懒惰权限撤销、安全元数据缓存等一系列技术以降低安全模块对网盘系统在性能方面所产生的影响.实验结果表明,加载安全模块后网盘系统的性能并没有出现明显地下降,其整体性能仍在用户能够接受的范围.In recent years, online storage systems received quickly promotion and popularization. But the online providers leaked the user＇s data frequently, which showing that existing online systems still have some flaws in the way of protecting the user＇s data. This article propose a efficient and convenient security module of online storage systems. Online systems which loading this module can provide user with data confidentiality, data integrity and access control. Our security modules adopt coupling design for the sake of guaranteeing the independence of the online storage system, and the module also introduce a CA as an independent Third-Party to enhance the authority of the whole system. Beyond that, the module also employ distributed key management, lazy revocation technique and caching technology to reduce the influence which the security module bring to the online system. Our experiment results show that when loading the security module, the whole system could not lose much performance which is not beyond the acceptable range of the user.

关 键 词：网络硬盘存储系统 安全模块 数据私密性 数据完整性 访问权限控制 密钥管理 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]