基于前缀保持加密的网络功能外包系统  

Network function outsourcing system based on prefix-preserving encryption

作　　者：魏凌波 冯晓兵 张驰[1,2] 盛化龙 俞能海 WEI Lingbo;FENG Xiaobing;ZHANG Chi;SHENG Hualong;YU Nenghai(CAS Key Laboratory of Electromagnetic Space Information,School of Information Science and Technology,University of Science and Technology of China,Hefei 230026,China;State Key Laboratory of Information Security,Institute of Information Engineering,Chinese Academy of Sciences,Beijing 100093,China)

机构地区：[1]中国科学技术大学信息科学技术学院中国科学院电磁空间信息重点实验室,安徽合肥230026 [2]中国科学院信息工程研究所信息安全国家重点实验室,北京100093

出　　处：《通信学报》2018年第4期159-166,共8页Journal on Communications

基　　金：国家重点研发计划基金资助项目(No.2017YFB0802200);国家自然科学基金资助项目(No.61702474)~~

摘　　要：基于硬件中间盒实现的网络功能成本高且可扩展性差等问题,越来越多的企业用户将网络功能的实现外包给云服务商。现有的网络功能外包方案要求用户对云服商公开通信流量和网络功能策略,暴露了用户内网的私密信息。基于轻量级的前缀保持加密方案,提出一种保护隐私的网络功能外包系统。与现有同类方案相比,该系统不仅为企业用户同时实现了通信流量与网络功能策略的隐私保护,而且具有更高的吞吐量和更低的时延。Due to the problem of high cost and limited scalability of dedicated hardware middleboxes,it is popular for enterprises to outsource middleboxes as software processes to the cloud service provider.In the current network function outsourcing schemes,the cloud service provider requires the enterprise’s communication traffic and network strategy which poses a serious threat to the enterprise’s piracy.Based on prefix-preserving encryption,a privacy preserving network function outsourcing system was proposed.Compared with other similar schemes,the system not only realizes the privacy protection of communication traffic,but also has higher throughput and lower delay.

关 键 词：网络功能外包 云计算 前缀保持加密 隐私保护 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]