基于差分隐私模型的云数据副本安全控制方案  

Security control scheme for cloud data copy based on differential privacy model

作　　者：任君[1,2] 熊金波[1,2] 姚志强[1,2] REN Jun XIONG Jin-bo YAO Zhi-qiang(Faculty of Software, Fujian Normal University, Fuzhou 350108, China Fujian Engineering Research Center of Public Service Big Data Mining and Application, Fuzhou 350108, China)

机构地区：[1]福建师范大学软件学院,福建福州350108 [2]福建省公共服务大数据挖掘与应用工程技术研究中心,福建福州350108

出　　处：《网络与信息安全学报》2017年第5期38-46,共9页Chinese Journal of Network and Information Security

基　　金：国家自然科学基金资助项目(No.61370078;No.61402109)~~

摘　　要：针对敌手利用重复数据删除作为侧信道攻击用户隐私信息的问题,提出一种安全的文件副本数量控制方案。核心思想是构建混合云架构,结合差分隐私中的隐私保护参数及收敛加密算法计算文件密钥值并对其进行二次加密,保证每个文件在服务器中只存有一个副本。与已有的通过设置阈值来控制副本数量的方案进行比较分析,所提方案可抵抗侧信道攻击、相关文件的攻击,以及针对加密算法的特定攻击,并节约了网络带宽及磁盘存储空间。In cloud computing environment, adversary may use data deduplication as a side channel to eavesdrop users＇ privacy. In order to tackle this serious issue, a secure copy number control scheme was proposed. The high- lights of the proposed scheme lie in constructing a hybrid cloud framework. Then file was encrypted for second times by using the privacy protection parameters of differential privacy as well as the key of the file computed by convergent encryption algorithm. After the file is uploaded, each file has only one copy in the server. Meanwhile, compared with the scheme that use setting threshold value to control the number of copies, the proposed scheme can resist against the side channel attack, related files attack, and the specific attack of encryption algorithm and save the network bandwidth and disk storage space.

关 键 词：关键词:重复数据删除:差分隐私 收敛加密 混合云 侧信道攻击 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]