一种改进的短签名云数据审计方案  

Improved short-signature based cloud data audit scheme

作　　者：崔圆佑 王绪安[1] 郎讯 涂正 苏昀暄 CUI Yuanyou;WANG Xu’an;LANG Xun;TU Zheng;SU Yunxuan(College of Cryptographic Engineering,Engineering University of PAP,Xi’an 710000,China;Anhui Corps of PAP,Hefei 230000,China;Guizhou Corps of PAP,Guiyang 550000,China)

机构地区：[1]武警工程大学密码工程学院,陕西西安710000 [2]武警安徽总队,安徽合肥230000 [3]武警贵州总队,贵州贵阳550000

出　　处：《西安电子科技大学学报》2023年第5期132-141,共10页Journal of Xidian University

基　　金：国家自然科学基金(62172436);陕西省自然科学基金(2023-JC-YB-584);武警工程大学基础前沿创新项目(WJY202313)。

摘　　要：随着物联网的发展,云存储数据产生了爆发式的增长,有效验证存储在云存储服务提供商上数据的完整性成为了一个重要问题。为解决已知的基于BLS短签名的数据完整性审计方案计算效率不高的问题,2019年ZHU等设计了基于ZSS短签名的数据完整性审计方案。但ZHU等的方案在挑战阶段生成的证据在运算上存在正确性问题,并且能对其进行重放攻击或者利用双线性映射特征进行攻击,从而通过第三方审计者的审计。通过改进挑战阶段证据的计算方法,优化验证阶段第三方审计者用于验证证据的双线性对等式,提出了优化的基于ZSS短签名的云数据审计方案。证明了改进后方案的正确性,弥补了原方案中存在的不足,同时分析了方案的安全性。改进的方案中不仅包括第三方审计者在内的攻击者无法恢复出用户数据,而且可以抵抗包括恶意云存储服务提供商在内的攻击者的重放攻击和伪造攻击。通过数值分析发现,计算开销变化不大,通信代价降低,比原方案提供了更好的计算准确性。With the development of the Internet of Things,Cloud storage has experienced an explosive growth.Effective verification of the integrity of data stored on the Cloud storage service providers(CSP)has become an important issue.In order to solve the problem that the existing data integrity audit scheme based on the BLS short signature is inefficient,ZHU et al.designed a data integrity audit scheme based on the ZSS short signature in 2019.However,this paper points out that the proof generated by ZHU et al.'s scheme in the challenge phase is incorrect and can be subjected to replay attacks or attacked by using a bilinear map,so as to pass the audit of a third party auditor(TPA).Then,this paper proposes an improved cloud audit scheme based on the short signature by improving the calculation method of proof in the challenge stage and optimizing the equations used by the third party auditor in the verification stage for verifying proof.This paper proves the correctness of the improved scheme,compensates for the shortcomings in the original scheme,and analyzes the security of the scheme.The improved scheme not only can make attackers including the third party auditor unable to recover users’data,but also can resist replay attacks and forgery attacks of attackers including malicious cloud storage service providers.Through numerical analysis,it is found that the computational cost did not change much,and that the communication cost decreased,thus providing a better computational accuracy than the original scheme.

关 键 词：短签名 云存储 云安全 持有性证明 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构] TN918.4[自动化与计算机技术—计算机科学与技术]