基于封闭环境加密的云存储方案  

Cloud storage scheme based on closed-box encryption

作　　者：杜瑞忠[1,2] 王少泫 田俊峰[1,2] DU Rui-zhong;WANG Shao-xuan;TIAN Jun-feng(College of Computer Science and Technology, Hebei University, Baoding 071002,China;Key Lab on High Trusted Information System in Hebei Province, Baoding 071002,China)

机构地区：[1]河北大学计算机科学与技术学院,河北保定071002 [2]河北省高可信信息系统重点实验室,河北保定071002

出　　处：《通信学报》2017年第7期1-10,共10页Journal on Communications

基　　金：国家自然科学基金资助项目(No.61170254;No.60873203);河北省自然科学基金资助项目(No.F2014201098);河北省高等学校科学技术研究基金资助项目(No.ZD2016043);河北省物联网数据采集与处理工程技术研究中心基金资助项目(No.河北065201)~~

摘　　要：针对保护云存储中用户数据机密性的问题,提出了一种在云服务提供商处加密数据的云存储方案。通过虚拟机隔离技术来构造封闭计算环境,改进RSA公钥加密算法使其不需要重新产生大素数就能实现密钥变化,并通过SSL安全链接传输数据以及密钥,将数据在封闭计算环境中安全加密后再存储至分布式文件系统。封闭计算环境能阻止操作系统中不良应用以及云管理员的攻击,有效防范数据泄露。实验结果表明,用户数据的机密性得到了提升,并且相较于其他在云端加密的云存储方案,所提方案所带来的性能损耗降低了许多。Aiming at protecting the confidentiality of data for cloud storage users,a scheme that encrypt data in cloud service providers was presented.The scheme constructed a closed-box computing environment by virtual machine isolation technique,improved algorithm of RSA to change keys without having to produce large prime numbers,transfer data and keys through SSL and encrypted data in the closed computing environment before storing to the distributed file system.Closed-box computing environment can prevent attacks from cloud administrators and malicious applications in the operating system.It also can guard against data leakage effectively.The result of experiment shows that the confidentiality of data improved and the performance loss is decreased considering to other cloud storage scheme that encrypt data in cloud.

关 键 词：云存储 分布式文件系统 封闭计算环境 RSA 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]