面向云存储的海量密钥管理方案设计与实现  

Design and Implementation of Massive Encryption Key Management Scheme for Cloud Storage

作　　者：张彤 张伟[1] 王佳慧 刘珂 马利民 Zhang Tong;Zhang Wei;Wang Jiahui;Liu Ke;Ma Limin(School of Computer,Beijing Information Science&Technology University,Beijing 100101;Department of Information and Security,State Information Center,Beijing 100045)

机构地区：[1]北京信息科技大学计算机学院,北京100101 [2]国家信息中心信息与网络安全部,北京100045

出　　处：《信息安全研究》2023年第9期859-867,共9页Journal of Information Security Research

基　　金：国家重点研发计划项目(2020YFC1522702)。

摘　　要：云存储因其成本低、访问快等优势逐渐成为未来大数据存储的理想方式,但云平台的开放性以及共享性和平台对数据较高的管理权限使这种模式给用户数据的机密性以及完整性带来隐患.因此,基于云的数据存储应采用密码技术进行保护,但是海量用户和细粒度加密产生了海量的密钥,给存储系统带来了较大的压力.针对云存储的场景,研究海量密钥管理的方法,提出了基于矩阵的密钥派生方案和基于SM2门限算法的密钥分发方案,有效降低了密钥存储空间,并提高了密钥分发的安全性.Cloud storage is an emerging technology for its low cost and high efficiency,but the openness,shareability,and the extravagant provided privilege of the cloud platform bring hidden danger to the confidentiality and integrity of users’data.Hence,cloud-based data storage should be protected by cryptographic techniques,but massive users and fine-grained encryption generate massive keys,which puts greater pressure on the storage system.For the cloud storage scenario,this paper studies the method of mass key management.and proposes a key derivation scheme based on matrix and a key distribution scheme based on SM2 threshold algorithm,which effectively reduces the key storage space and improves the security of key distribution.

关 键 词：云存储 密码技术 密钥管理 密钥派生 密钥分发 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]