抗双方泄漏抵赖的云端数据托管协议  

DATA ESCROW PROTOCOL IN CLOUD WITH BOTH PARTIES NON-REPUDIATION ON DATA LEAKAGE

作　　者：景泉 李晓东[1,2] 金鑫[2] 赵耿[1,2] Jing Quan;Li Xiaodong;Jin Xin;Zhao Geng(Xidian University,Xi＇an 710071,Shaanxi,China;Beijing Electronic Science and Technology Institution,Beijing 100070,China)

机构地区：[1]西安电子科技大学,陕西西安710071 [2]北京电子科技学院,北京100070

出　　处：《计算机应用与软件》2018年第9期281-287,共7页Computer Applications and Software

基　　金：国家自然科学基金面上项目(61772047)

摘　　要：随着个人和企业数据量的迅速增加和云计算技术的成熟,越来越多的用户选择将数据存储在云服务器上,并委托云服务器对数据进行处理。然而,数据是企业的无形资产,用户担心云服务器将自己提交的数据泄露给未授权的第三方,这会导致企业或个人承担一系列的风险,甚至造成经济或名誉的损失。首次提出一种抗双方泄露抵赖的云端数据托管协议,该协议利用数字水印方法将托管信息隐藏在数据中,可抵抗服务方数据泄露抵赖和委托方诬陷服务方泄露数据的攻击。对该协议进行模拟实现,实验结果证明了协议的正确性,且性能上已接近实用性要求。With the proliferation of data and the maturation of cloud computing technology, more and more users choose to store data on the cloud server and commissioned the cloud server to process the data. However, the data is the intangible assets of the enterprise, users do not want the cloud server to submit their own data leaked to unauthorized third parties, which will lead enterprises or individuals to bear a series of risks, and even cause the loss of economy or reputation. Therefore, for the first time, we propose a new protocol that cannot be denied by both parties in the event of data leakage. This protocol used the digital watermarking method to hide the managed information in the data, which can prevent the server from denying the data disclosure and the client from falsely accusing the server of leaking the data. The protocol was simulated and implemented. The experimental results show that the protocol is correct, and the performance is close to the practical requirements.

关 键 词：数据泄露 防抵赖 数据托管 水印 同态加密 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]