面向云存储的多副本文件完整性验证方案  

Proofs of Data Possession of Multiple Copies

作　　者：付艳艳[1] 张敏[1] 陈开渠 冯登国[1] 

机构地区：[1]中国科学院软件研究所可信计算与信息保障实验室,北京100190 [2]国家超级计算深圳中心(深圳云计算中心),广东深圳518055

出　　处：《计算机研究与发展》2014年第7期1410-1416,共7页Journal of Computer Research and Development

基　　金：国家自然科学基金项目(61232005;61100237);深圳市战略新兴产业发展专项基金项目(CXZZ20120831113048965)

摘　　要：文件完整性验证是云存储服务的一项重要安全需求.研究者已经提出多项针对云存储文件完整性验证的机制,例如数据持有性验证(prove of data possession,PDP)或者数据可恢复证明(proof of retrievability,POR)机制.但是,现有方案只能够证明远程云存储持有一份正确的数据,不能检验其是否保存多份冗余存储.在云存储场景中,用户需要验证云存储确实持有一定副本数的正确文件,以防止部分文件意外损坏时无法通过正确的副本进行恢复.提出的多副本文件完整性验证方案,能够帮助用户确定服务器正确持有的文件副本数目,并能够定位出错的文件块位置,从而指导用户进行数据恢复.实验证明,充分利用了多服务器分布式计算的优势,在验证效率上优于单副本验证方案.Cloud storage services have quickly gained enormous popularity. They offer great convenience for data storage and sharing. However, since all user data are kept on remote servers and out of user＇s control, user may concern about data status. In order to expand storage service, data integrity verification is one of the critical security requirements for cloud storage service to fulfill. In order to verify the integrity status of files on remote cloud servers, many mechanisms have been proposed, such as PDP and POR. However, these methods can only ensure that the remote server holds ONE COPY of user data correctly. In fact, user needs to make sure that there are multiple copies kept on remote servers, incase that the corrupted file parts could not be recovered with a right copy. In this paper, we propose a multi-copy integrity checking scheme, which enables user to verify that HOW MANY COPIES are actually correct in the server. And this scheme could also identify the corrupted file blocks, thus to guide data recovery. Experimental results show that it has better performance comparing with the one copy schemes, owing to the distributing computations to multiple servers.

关 键 词：云存储 一致性 完整性 多副本 冗余存储 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]