云计算中的轻量级查询结果验证机制  

Lightweight Query Result Authentication Scheme in Cloud Computing

作　　者：洪军[1] 王秀娟[3] 付崇国 刘怡文 康珺[1] HONG Jun;WANG Xiujuan;FU Chongguo;LIU Yiwen;KANG Jun(School of Software,North University of China,Taiyuan 030051,China;School of Computer Science and Engineering,Northeastern University,Shenyang 110819,China;School of Data Science and Technology,North University of China,Taiyuan 030051,China)

机构地区：[1]中北大学软件学院,太原030051 [2]东北大学计算机科学与工程学院,沈阳110169 [3]中北大学大数据学院,太原030051

出　　处：《电讯技术》2020年第1期106-111,共6页Telecommunication Engineering

基　　金：国家自然科学基金资助项目(61772101,61772124);山西省自然科学基金项目(201601D202038)

摘　　要：存储在云计算服务器上的数据可能被篡改或删除,查询完整性验证的作用是确保查询用户能够验证查询结果中的数据是真实的,且包含所有满足条件的数据。提出了一种基于签名链结构的查询完整性验证机制。方案使用代数签名机制替代数字签名实现校验值的计算,从而有效降低计算和查询验证开销。此外,通过维护一种新的、简单的索引结构实现了仅需下载少量数据即可实现校验值的更新。实验结果表明,所提方案比基于数字签名的签名链方案具有更小的更新开销和更高的验证效率。Outsourced data stored on the cloud servers may be tampered with or deleted,the purpose of the query integrity verification scheme is to enable the query user to verify that the data in the query results is authentic and all the data that meets the query condition is in the query results.A new lightweight query verification mechanism based on signature-chain structure is proposed for query integrity verification.By replacing digital signature with algebraic signature,the scheme reduces both the computation overhead and query verification overhead.In addition,the data owner maintains a new and simple index structure to realize incremental update of algebraic signature by downloading only a small amount of data.Experimental results show that the proposed mechanism has less update overhead and higher verification efficiency than the schemes based on digital signature.

关 键 词：云计算 代数签名 查询完整性 数据外包 数字签名 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]