基于洋葱加密模型的同态云平台设计  

Design of Homomorphic Cloud Platform Based on Onion Encryption Model

作　　者：李子臣 杨薇[2] 杨亚涛 孙亚飞[2,3] 梁斓 LI Zichen1,2,3 , YANG Wei2 , YANG Yatao2,3 , SUN Yafei2,3 , LIANG Lan2,3(1. College of Information Engineering,Beijing Institute of Graphic Communication,Beijing 102600, China;2. Department of Graduate Students,Beijhag Electronic Science and Technology Institute,Beijing 100070, China;3. College of Communication EngineeNag, Xidian University, Xi＇ an 710071, Chin)

机构地区：[1]北京印刷学院信息工程学院,北京102600 [2]北京电子科技学院研究生系,北京100070 [3]西安电子科技大学通信工程学院,西安710071

出　　处：《计算机工程》2018年第8期24-29,共6页Computer Engineering

基　　金：国家自然科学基金(61370188);"十三五"国家密码发展基金(MMJJ20170110)

摘　　要：在云平台服务端数据解密过程中,容易出现信息泄露、数据库管理员窥探用户隐私信息以及客户端处理任务过重等问题。为此,提出一种基于同态密码的安全云平台设计方案。在满足银行业务处理需求的私有云平台应用场景下,采用可调整洋葱加密策略,利用Paillier加法同态特性和ElGamal乘法同态特性直接操作密文,避免客户端与服务端频繁的交互及加解密处理。仿真实验与效率分析结果表明,该方案在保证运算效率的同时,可有效抵御选择明文攻击。In data decryption process of cloud platform server,it is easy to cause problems of information disclosure,the database administrators spy on users＇ privacy information and heavy processing tasks of client. To solve above problems,a design scheme of security private cloud platform based on homomorphic cryptography is proposed. In the private cloud platform scene meeting the demand of bank business processing,by adopting with adjustable onion encryption strategy,ciphertexts can be evaluated directly by additive homomorphism of Paillier and multiplicative homomorphism of ElGamal. Then,frequent interactions between client and server,as well as data encryption and decryption operations can be avoided. Simulation experiment and efficiency analysis results show that the proposed scheme can effectively resist the chosen plaintext attack while ensuring the operation efficiency.

关 键 词：同态运算 洋葱加密模型 密文数据库 同态加密 私有云 

分 类 号：TP391.9[自动化与计算机技术—计算机应用技术]