基于安全硬件的云端数据机密性验证方案  

An Intel SGX-based Proof of Encryption in Clouds

作　　者：尤玮婧 刘丽敏[2] 马悦 韩东 YOU Weijing;LIU Limin;MA Yue;HAN Dong(School of Computer Science Technology^University of Chinese Academy ofScience,Beijing 100043,China;State Key Laboratory of Information Security,the Institute of information engineerings CAS,Beijing 100089,China;Xi'an Power Supply Company,Xi'an 710032,China;Beijing CCID Software Testing Engineering Technology Center C0.,LTD.,Beijing 100048,China)

机构地区：[1]中国科学院大学计算机科学与技术学院,北京100043 [2]中国科学院信息工程研究所信息安全国家重点实验室,北京100089 [3]国家电网西安供电公司,西安710032 [4]北京赛迪软件测评工程技术中心有限公司,北京100048

出　　处：《信息网络安全》2020年第12期1-8,共8页Netinfo Security

基　　金：国家重点研发计划[2017YFB0802404]。

摘　　要：随着物联网、社交网络、移动边缘计算和雾计算等新兴技术的出现和发展,互联网承载的数据量逐年攀升,云存储技术为大规模的数据存储管理提供了集约、规范与高效的解决方案。云存储技术在提供便利的同时,也对云用户信息资产安全和隐私保护带来了巨大的挑战。目前,云端数据机密性验证已成为云存储领域亟待突破的重要安全问题。文章总结和分析现有云存储数据机密性验证方案,提出一种基于安全硬件的云端数据机密性验证方案,安全分析及与现有方案的效率对比表明,该方案在达到安全目标的前提下有效提升了运行效率。With the evolvement of the Internet of Things(IoT),the edging computing,and the fog computing,the volume of data on the Internet surges by years In this case,the cloud storage technique comes and provides centralized,formalized,and efficient storage services to the cloud users.Despite the convenience attributed to using the cloud storage,it also brings great challenges on information security and privacy.The assurance of data confidentiality in the cloud storage has become a significant security issue.First,this paper analyzes existing proof of confidentiality schemes.Second,an Intel sgx-based proof of confidentiality in cloud storage is proposed.The security analysis and performance evaluation show the proposal is efficient and without degrading security.

关 键 词：云存储 可信执行环境 英特尔软件安全扩展 加密 数据机密性验证 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]