抗密钥泄露的支持密态数据去重的完整性审计方案  

Key-exposure resilient integrity auditing scheme with encrypted data deduplication

作　　者：张襄松[1] 李晨 刘振华 ZHANG Xiangsong;LI Chen;LIU Zhenhua(School of Science,Xi’an Technological University,Xi’an 710021,China;School of Mathematics and Statistics,Xidian University,Xi’an 710071,China)

机构地区：[1]西安工业大学理学院,陕西西安710021 [2]西安电子科技大学数学与统计学院,陕西西安710071

出　　处：《通信学报》2019年第4期95-106,共12页Journal on Communications

基　　金：国家自然科学基金资助项目(No.61807026;No.61472470);国家重点研发计划基金资助项目(No.2017YFB0802000);陕西省教育厅专项科研计划基金资助项目(No.17JK0362)~~

摘　　要：针对云存储环境中密钥泄露、数据重复和完整性检验的问题,提出了一种支持密钥更新和密文数据去重的完整性审计方案。所提方案利用布隆过滤器实现了密态数据的客户端去重,且每一次密钥更新能保证更新结果不能由其余时间周期的密钥猜测得到。该方案首次解决了在支持密态数据去重的审计方案中密钥更新困难的问题。安全性分析表明,所提方案在随机预言机模型下基于计算性Diffie-Hellman困难问题假设具有强抗密钥泄露、机密性、可检测性以及认证标签和证明值的不可伪造性。For the problems of key-exposure, encrypted data duplication and integrity auditing in cloud data storage, a public auditing scheme was proposed to support key update and encrypted data deduplication. Utilizing Bloom filters, the proposed scheme could achieve client-side deduplication, and guaranteed that the key exposure in one time period didn’t effect the users’ private key in other time periods. The proposed scheme could solve the conflict between key-exposure resilient and encrypted data deduplication in public auditing scheme for the first time. Security analysis indicates that the proposed scheme is strong key-exposure resilient, confidentiality, detectability, and unforgeability of authentication tags and tokens under the computation Diffie-Hellman hardness assumption in the random oracle model.

关 键 词：云存储 完整性审计 抗密钥泄露 密态数据 客户端去重 

分 类 号：TN309[电子电信—物理电子学]