基于代理重签名的云端数据完整性验证方案  

Integrity Verification Scheme for Cloud Data Based on Proxy Re-signature

作　　者：杨小东 刘婷婷 杨平 安发英 肖立坤 王彩芬 YANG Xiaodong;LIU Tingting;YANG Ping;AN Faying;XIAO Likun;WANG Caifen(College of Computer Science and Engineering,Northwest Normal University,Lanzhou 730070,China)

机构地区：[1]西北师范大学计算机科学与工程学院,兰州730070

出　　处：《计算机工程》2018年第9期130-135,共6页Computer Engineering

基　　金：国家自然科学基金(61662069);中国博士后科学基金(2017M610817);甘肃省科技计划项目(145RJDA325;1506RJZA130);国家档案局科技计划项目(2014-X-33);甘肃省高等学校科研项目(2014-A011);兰州市科技计划项目(2013-4-22);西北师范大学青年教师科研能力提升计划项目(WNU-LKQN-14-7)

摘　　要：针对数据动态更新和群组用户撤销的问题,提出一种新的云端数据完整性验证方案。基于代理重签名技术实现数据所有权的转移和用户的撤销。使用随机掩码技术防止好奇的第三方审计者恢复原始数据块,确保云端数据的隐私性。通过多分支路径树构建简单的认证结构,简化数据更新过程,从而支持云端数据的插入、修改和删除等更新操作。分析结果表明,该方案满足存在不可伪造性,能抵抗重放攻击和删除攻击。A new integrity verification scheme for cloud data is proposed to solve the problems of dynamic data updating and user revocation.The new scheme uses proxy re-signature to transfer data ownership and revoke users.By using the random masking technique,it can prevent the curious third-party auditor from restoring raw data blocks and ensure privacy of cloud data.In addition,a simple authentication structure is constructed by multi-branch path tree,which simplifies the data update process and supports the update operations such as inserting,modifying and deleting the cloud data.The analysis results show that the proposed scheme satisfies existential unforgeability,and can resist replay attack and deletion attack.

关 键 词：云端存储 完整性验证 代理重签名 多分支路径树 用户撤销 数据动态更新 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]