基于阿里云平台的密文数据安全去重系统的设计与实现  

Design and Implementation of Secure Deduplication System for Ciphertext Data Based on Aliyun

作　　者：宋建业[1] 何暖[2] 朱一明[1] 付安民[1] 

机构地区：[1]南京理工大学计算机科学与工程学院,江苏南京210094 [2]中国船舶工业综合技术经济研究院,北京100081

出　　处：《信息网络安全》2017年第3期39-45,共7页Netinfo Security

基　　金：国家自然科学基金[61572255];江苏省自然科学基金[BK20141404];中央高校基本科研业务费专项[30915011322]

摘　　要：随着云计算服务的广泛使用,越来越多的数据被存储到云服务器上。为了解决云存储系统中加密数据面临的密文重复性检测和拥有权证明(Proof of Ownership,PoW)等问题,文章利用收敛加密和Bloom过滤器的方法设计和实现了一个基于阿里云平台的密文数据安全去重系统。首先,利用收敛加密的方法产生文件的加密密钥,实现了不同用户之间密钥的共享,有利于跨用户之间密文的去重;其次,基于Bloom过滤器的方法,实现了文件拥有权证明,有效地预防了攻击者通过单一的文件哈希值去获取整个文件;最后,基于当前的阿里云平台实现了整个安全去重系统,有效地保证了数据去重的安全性。此外,实验结果和性能分析也证明了方案是高效可行的。With the wide use of cloud computing service, more and more data is stored in the cloud server. To solve the problems faced by enciphered data in cloud storage system, such as detection and PoW （proofs of ownership） of duplicated ciphertext, etc,e complete a secure deduplication system for ciphertext data based on aliyun by usibg convergent encryption and Bloom Filter algorithm. First of all,we utihze convergent enctyption method to generate a file enctyption key,which implements the key shared between different users and is advantageous to cross-user ciphertext deduplication. Secondly,the proof of ownership for files is realized b}^ Bloom filter so as to prevent the attackers with a single file hash value to obtain files efficient^. Finalty, based on cuixent cloud platforai provided b}^ altyun, we realize the secure deduplication system and guarantee the safety of data deduplication. In addition, the results of experiments and performance analysis have proved that the scheme is efficient and feasible.

关 键 词：数据安全去重 拥有权证明 收敛加密 BLOOM过滤器 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]