基于密文强不可分性的云数据确定性删除方案  

An assured deletion scheme of cloud data based on strongly non-separable cipher

作　　者：付伟[1] 谢振杰 朱婷婷[1] 任正伟 FU Wei;XIE Zhen-jie;ZHU Ting-ting;REN Zheng-wei(Department of Information Security,Naval University of Engineering,Wuhan 430033;College of Computer Science&Technology,Wuhan University of Science and Technology,Wuhan 430081;Troop 78156 of PLA,Chongqing 400039,China)

机构地区：[1]海军工程大学信息安全系,湖北武汉430033 [2]武汉科技大学计算机科学与技术学院,湖北武汉430081 [3]中国人民解放军78156部队,重庆400039

出　　处：《计算机工程与科学》2023年第3期434-442,共9页Computer Engineering & Science

基　　金：国家自然科学基金(62276273)。

摘　　要：实现云数据删除的确定性是云存储安全领域亟待解决的关键问题。现有方案普遍存在过度依赖于密钥销毁、不具备密文强不可分性和加解密开销过大等缺陷。结合AONT转换与分组加密,提出一种基于密文强不可分性的云数据确定性删除方案,通过混淆原始数据本身实现密文数据的强不可分性。理论分析和实验结果表明,该方案销毁密文数据的任何一个密文数据块都将导致原始数据无法复原,摆脱了对密钥销毁的过度依赖,实现了确定性删除的预期目标;通过引入数据块乱序并减少密码运算次数,在提升抗密文分析能力的同时大幅降低了计算开销,与现有方案相比具有明显的性能优势。Assured deletion of cloud data is a key issue to be solved in the field of cloud storage secu-rity.Existing schemes generally have the drawbacks of over-reliance on key destruction,lack of strong non-separability of ciphertext,excessive encryption and decryption overhead and so on.To solve these problems,by combining AONT conversion with block cipher,a cloud data assured deletion scheme is proposed,which achieves strong non-separability of ciphertext by confusing the original data itself.Theoretical analysis and experimental results show that destroying any piece of cipher data will result in unrecoverable original data in this scheme,thus getting rid of over-reliance on key destruction,which achieves the expected goal of trusted deletion.At the same time,by introducing data block shuffling and reducing the number of cryptographic operations,the ability of anti-ciphertext analysis is improved and the computing overhead is significantly reduced.This scheme has obvious performance advantages compared with existing schemes.

关 键 词：云存储 云安全 确定性删除 可信删除 强不可分性 数据销毁 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]