云数据机密性保护和完整性验证方案  

Cloud data confidentiality protection and integrity verification scheme

作　　者：申长虹[1] 张博[1] 曾子川 刘瑜[1] 吕春利[1] 

机构地区：[1]中国农业大学信息与电气工程学院,北京100083

出　　处：《计算机应用》2016年第A02期54-56,65,共4页journal of Computer Applications

基　　金：国家自然科学基金资助项目(61202479);中国农业大学青年科学基金资助项目(F020701);中央高校基本科研业务费专项资金资助项目(2016XD001)

摘　　要：针对云存储服务的安全需求,提出一种同时保护云数据机密性和完整性的安全方案。该方案应用基于XOR指令的高效秘密共享算法和随机置换函数,实现对云数据机密性的保护。方案在异或运算和置换运算上具有同态性,即对密文的操作可以映射到明文,这种同态性可以实现信息聚合,进而满足数据完整性验证常用的"挑战-应答"机制,达到低带宽的验证效果。分析表明,以异或运算和置换运算为主体,即可满足保护数据机密性和完整性的目的。To meet the security demand of cloud storage services, a new safety scheme was put forward to protect the cloud data confidentiality and integrity simultaneously. This scheme applied an efficient XOR-based secret-sharing algorithm and random permutation function for confidential protection of cloud data. It has homomorphism on XOR operation and permutation computation, which means the operation of ciphertext can be mapped to plaintext. The homomorphism can implement data aggregation and satisfy the challenge/response mechanism used for verifying data integrity to achieve the verification effects at low bandwidth. Analysis shows that mainly using XOR operation and in-place computation can realize the protection of data confidentiality and integrity.

关 键 词：完整性 机密性 秘密共享 云存储 异或 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构] TP309[自动化与计算机技术—计算机科学与技术]