基于区块链的云数据完整性验证研究综述  

Survey on Blockchain-based Integrity Validating for Cloud Data

作　　者：杨潇[1] 吴黎兵[1] 张壮壮 霍丽娟 YANG Xiao;WU Li-bing;ZHANG Zhuang-zhuang;HUO Li-juan(School of Cyber Science and Engineer,Wuhan University,Wuhan 430072,China)

机构地区：[1]武汉大学国家网络安全学院,武汉430072

出　　处：《小型微型计算机系统》2023年第11期2369-2376,共8页Journal of Chinese Computer Systems

基　　金：中国国家重点研发计划项目(2021YFB3101100)资助。

摘　　要：云存储服务与传统的内部存储基础设施相比,拥有更高的扩展性以及更低的管理成本,其低成本和可靠性的优势吸引了越来越多的用户选择将数据存储到云存储服务器上.但是云存储服务也给用户带来了额外的安全问题,即用户失去了对数据的控制,无法确保云数据的完整性.目前已有很多云数据完整性验证方案来确保用户可以及时发现云上数据的损坏,但是传统方案本质上都是一种中心化的审计服务,面临着单点故障的风险;且存在着数据拥有者与审计者都是可信的安全假设,未能考虑到二者的不诚实行为所带来的安全风险;同时协议运行的透明程度不够,无法在协议运行异常的时候追溯到违反协议规定的一方.区块链技术为解决上述问题提供了新的方向,目前已有很多研究将区块链和传统云数据完整性验证方案相结合,增强了协议的可靠性与运行透明度.该文根据对区块链的不同利用方式对相关文献进行了梳理分类及对比分析,并指出了基于区块链的云数据完整性验证这一研究领域尚需要解决的问题及研究方向.Compared with traditional internal storage infrastructure,cloud storage services have higher scalability and lower management costs.The low cost and reliability of cloud storage services have attracted more and more users to choose to store data on cloud storage servers.However,cloud storage services also bring additional security issues to users,namely that users lose control over their data and cannot ensure the integrity of cloud data.Currently,there are many cloud data integrity verification solutions that ensure users can timely detect data corruption on the cloud.However,traditional solutions are essentially centralized auditing services that face the risk of single-point failures.And there is a security assumption that both the data owner and the auditor are credible,and the security risks brought about by the dishonest behavior of the two parts are not considered.At the same time,the transparency of the protocol running is not enough to trace back to the violator of the protocol in case of abnormal protocol running.Blockchain technology provides a new direction for solving the above problems.Many studies have combined blockchain with traditional cloud data integrity verification solutions,enhancing the reliability and transparency of the protocol.This paper categorizes and compares relevant literature based on the different uses of blockchain and points out the problems and research directions that still need to be addressed in the field of blockchain-based cloud data integrity verification.

关 键 词：区块链 云存储 完整性验证 数据持有性证明 数据可恢复证明 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]