基于多云存储的Android密钥管理技术  

ANDROID KEY MANAGEMENT BASED ON MULTI-CLOUD STORAGE

作　　者：余宇劲 凌捷[1] Yu Yujing;Ling Jie(School of Computer,Guangdong University of Technology,Guangzhou 510006,Guangdong,China)

机构地区：[1]广东工业大学计算机学院,广东广州510006

出　　处：《计算机应用与软件》2020年第9期286-290,共5页Computer Applications and Software

基　　金：广东省重点领域研发计划项目(2019B010139002);广州市重大攻关计划项目(201902020006,201902020007)。

摘　　要：针对Android客户端的密钥管理难题,提出一种结合多云存储和秘密共享的Android密钥管理技术。与传统的Android端加密技术不同,其不在移动设备上存储密钥、用户指纹、图案密码等敏感信息,而是转化为在云端存储秘密份额。选择对称加密算法,结合一次性口令生成密钥,加密文件并存储密文;通过拉格朗日插值多项式为n个云服务端秘密共享者产生各自的秘密份额,删除口令和密钥信息,上传秘密份额至n个云服务端;用户解密时,客户端随机向m(m≤n)个云服务端发出请求,进行验证,返回相应的份额,在客户端进行重组,得到密钥进行解密。在多云场景下,对KB级至MB级的数据进行实验,结果表明:该技术增加了攻击者逆向获得密钥的难度,能够抵抗单个云客户端和云服务端的合谋攻击,且时间开销成本不高。Aiming at the key management problem of Android client,this paper proposes an Android key management technology that combines multi-cloud storage and secret sharing.It is different from the traditional Android encryption technology.Instead of storing sensitive information such as keys,user fingerprints,and pattern passwords on mobile devices,it is converted to store secret shares in the cloud.It chose a symmetric encryption algorithm,combined a one-time password to generate a key,encrypted the file,and stored the ciphertext.Through Lagrange interpolation polynomials,the respective secret shares of n cloud servers were generated,and passwords and key information were deleted.The secret shares were uploaded to n cloud servers.When the user decrypts,the client randomly sent a request to m(m≤n)cloud servers for verification,returned the corresponding share,reorganized in the client,and obtained the key for decryption.In the multi-cloud scenario,the data from KB level to MB level were tested,and the comparison was made with the scheme in literature.The technology in this paper increases the difficulty for the attacker to obtain the key in reverse.It can resist the collusion attack of single cloud client and cloud server,and the time cost is not high.

关 键 词：多云存储 秘密共享 ANDROID 数据安全 密钥 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]