一种基于双线性对的云存储数据安全保护协议  

Data Security Protection Protocol for Cloud Storage Based on Bilinear Pairings

作　　者：刘田天 龙士工[2] 冯金明 

机构地区：[1]贵州大学数学与统计学院,贵州贵阳550025 [2]贵州大学计算机科学与技术学院,贵州贵阳550025

出　　处：《贵州大学学报（自然科学版）》2017年第5期66-70,共5页Journal of Guizhou University:Natural Sciences

基　　金：国家自然科学基金项目资助(61163001)

摘　　要：针对支持公开验证的云存储模式中用户的数据隐私有可能泄露给第三方审计(TPA)的问题,为保护用户云端数据隐私和数据完整,提出一个基于双线性映射的云端数据完整性检测协议。该协议利用哈希函数单向性的性质,云存储服务器收到第三方审计的挑战请求后,对所需验证的数据块进行哈希运算处理,使第三方审计在验证阶段无法获得用户数据信息,从而保护用户的数据隐私;然后给出所提协议的正确性、数据完整性和数据隐私保护的分析;此外通过Merkel哈希树(MHT)的引入解决了数据动态更新的问题,如修改、删除、插入、追加。Focused on the issue that the privacy of users＆#39; data may be leaked to the Third Party Auditing（ TPA） in cloud storage model which supports public verification, a cloud date Integrity checking protocol based on bilin-ear mapping was proposed to protect users＇ cloud data privacy and data integrity. The protocol utilizes the proper-ty of the unidirectional nature of the hash function and the cloud storage server performs a hash operation on the data blocks that need to be verified after receiving the challenge request of the TPA. Consequently, the TPA can not obtain the users＆#39; data information in the verification phase and the privacy of users＆#39; data can be protected. Then the correctness of the proposed protocol, data integrity and data privacy protection were analyzed. In addi-tion, through the introduction of Merkel hash tree（ MHT） , the problems of dynamic update such as data modifi-cation, deletion, insertion and append were solved.

关 键 词：云存储 数据完整性 数据隐私保护 双线性映射 公开验证 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]