基于认证树的外包数据库连接查询验证方案  

Outsourcing Database Join Query Verification Scheme Based on Authentication Tree

作　　者：侯林[1] 冯达 玄鹏开 周福才[1] HOU Lin;FENG Da;XUAN Pengkai;ZHOU Fucai(Software College of Northeastern University,Shenyang 110169,China)

机构地区：[1]东北大学软件学院,沈阳110169

出　　处：《信息网络安全》2020年第2期91-97,共7页Netinfo Security

基　　金：国家自然科学基金[61872069];中央高校基本科研业务费项目[N130317002]。

摘　　要：在外包数据库广泛应用的同时,其安全性受到了很大的挑战。用户在查询数据时无法保证查询结果的正确性和完整性。文章针对现有的外包数据库不能支持连接查询验证问题,提出一种基于认证树的外包数据库连接查询验证模型,并给出了模型的形式化定义以及模型的正确性和安全性定义。文章利用双线性映射累加器、认证树等技术构建了基于认证树的外包数据库连接查询验证方案,利用密码学的VBDHE和q-BSDH困难性假设给出了安全性分析;通过证明敌手不能通过伪造错误结果来使得验证通过,从而证明了方案的正确性。实验结果及性能分析表明,文章方案在密钥生成、查询验证、通信开销、存储开销等方面比其他方案有更高的效率。While outsourcing database is widely used,its security is greatly challenged.Users cannot guarantee the correctness and integrity of the query results when querying data.Aiming at the problem that the existing outsourcing databases can not support connection query verification,this paper proposes a connection query verification model based on authentication tree,and gives the formal definition of the model and the definition of the correctness and security of the model.This paper uses bilinear map accumulator,authentication tree and other technologies to build a connection query verification scheme of outsourcing database based on authentication tree,and uses the VBDHE and q-BSDH difficulty assumption of cryptography to give the security analysis.This paper proves that the adversary can’t make the verification pass by falsifying the wrong results,thus proving the correctness of the scheme.Experimental results and performance analysis show that the proposed scheme has higher efficiency than other schemes in key generation,query verification,communication overhead,storage overhead,etc.

关 键 词：外包数据库 可验证集合计算 认证树 连接查询 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]