云环境下基于代数签名持有性审计的大数据安全存储方案  

Big Data Storage Security Scheme Based on Algebraic Signature Possession Audit in Cloud Environment

作　　者：徐洋[1,2] 朱丹[1] 张焕国[2] 谢晓尧[1] XU Yang ZHU Dan ZHANG Huan-guo XIE Xiao-yao(Key Laboratory of Information and Computing Science of Guizhou Province, Guizhou Normal University, Guiyang 550001, China School of Computer, Wuhan University, Wuhan 430072, China)

机构地区：[1]贵州师范大学贵州省信息与计算科学重点实验室,贵阳550001 [2]武汉大学计算机学院,武汉430072

出　　处：《计算机科学》2016年第10期172-176,共5页Computer Science

基　　金：国家重点基础研究发展计划(973)项目(2014CB340600);国家自然科学基金重点项目(61332019);贵州省基础研究重大项目(黔科合JZ字[2014]2001号);贵州省科技合作计划重点项目(黔科合LH字[2015]7763号);住房和城乡建设部科学技术计划项目(2016-K3-009);贵州省科技创新人才团队项目(黔科合人才团队(2012)4009)资助

摘　　要：针对存储在云端的大数据的安全性和动态更新问题,提出一种基于代数签名持有性审计的大数据安全存储方案。构建可信第三方审计者,利用代数签名(AS)技术对大数据进行数据持有性审计(DPA)以确保数据的完整性。另外,基于分而治之(DC)思想构建一种新型数据结构,使数据拥有者可以动态地进行修改、插入和删除操作,同时通过减少平移数据块的数量来降低操作的计算复杂度。实验结果表明,该方案能够有效地检测恶意操作,提供了较高的数据安全性,同时大大降低了服务器和审计端的计算量。For the issues of the security and dynamic updating of the big data stored in the cloud,a big data storage se- curity scheme based on algebraic signature possession audit was proposed. It builds trusted third party auditor to make data possession audit （DPA） for the big data by using algebraic signature （AS） technology to ensure the integrity of da- ta. In addition, a new type of data structure is built based on the idea of divide and conquer （DC）, allowing the data ow- ner to dynamically modify, insert and delete data. At the same time, the computation complexity is reduced by reducing the number of translated data blocks. Experimental results show that the proposed scheme can detect the malicious ope- ration effectively, provide higher data security, and greatly reduce the computation of the server and the audit side.

关 键 词：大数据 安全存储 代数签名 持有性审计 数据动态更新 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]