基于半可信第三方的用户云数据安全存储协议  

User Cloud Data Secure Storage Protocol Based on Semi-trusted Third Party

作　　者：王杰昌 刘玉岭 张平[3] WANG Jiechang;LIU Yuling;ZHANG Ping(Sports Big Data Center,Physical Education College of Zhengzhou University,Zhengzhou 450000,China;Institute of Information Engineering,Chinese Academy of Sciences,Beijing 100190,China;School of Mathematics and Statistics,Henan University of Science and Technology,Luoyang 471023,China)

机构地区：[1]郑州大学体育学院体育大数据中心,河南郑州450000 [2]中国科学院信息工程研究所,北京100190 [3]河南科技大学数学与统计学院,河南洛阳471023

出　　处：《无线电工程》2022年第1期134-141,共8页Radio Engineering

基　　金：国家自然科学基金(61802404);国家重点研发计划课题(2018YFC0824801);河南省科技攻关项目(212102310264)。

摘　　要：目前一些用户外包至云存储的数据面临着泄密风险,很多学者提出利用密钥管理员对数据加密后再外包,但相关协议并不能阻止密钥管理员截获并解密用户数据。针对该问题,将密钥管理员视为半可信第三方,构建了新的系统模型和安全模型,改进了利用密钥管理员加密数据的算法,提出基于半可信第三方的用户云数据安全存储协议(UKC),分别在单密钥管理员和多密钥管理员情形下设计了用户文件上传和下载的算法,有效地防止了来自密钥管理员的安全威胁,并节省运行时间开销。通过定理证明了本协议对密钥管理员攻击是IND-CCA安全的,性能仿真实验显示该协议的运行时间开销较低。At present, some user data outsourced to cloud storage are facing the risk of leakage.Many scholars propose to use key manager to encrypt data before outsourcing, but the relevant protocols cannot prevent the key manager from intercepting and decrypting user data.To solve this problem, by regarding the key manager as a semi-trusted third party, a new system model and a security model are constructed, the algorithm of encrypting data using the key manager is improved, a user cloud data secure storage protocol(UKC) based on semi-trusted third party is proposed, and the algorithms for user file upload and download are designed in the case of single key manager and multiple key managers respectively.UKC can effectively prevent the security threats from key manager and save the running time overhead.It is proved that the attack of UKC on the key manager is IND-CCA secure.The performance simulation experiment shows that the running time overhead of the protocol is also reduced.

关 键 词：云存储 半可信第三方 用户文件上传 用户文件下载 选择密文攻击的不可区分性 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]