基于同态哈希函数和虚拟索引的动态云审计方案  

Dynamic Cloud Audit Scheme Based on Homomorphic Hash Function and Virtual Index

作　　者：李秀广 袁文勇 李瑞峰 李晖[2] 杨晓元[1] LI Xiuguang;YUAN Wenyong;LI Ruifeng;LI Hui;YANG Xiaoyuan(Cryptographic Engineering College,Chinese People′s Armed Police Force Engineering University,Xi′an 710086,China;State Key Laboratory of Integrated Service Networks,Xidian University,Xi′an 710126,China)

机构地区：[1]武警工程大学密码工程学院,陕西西安710086 [2]西安电子科技大学综合业务网国家重点实验室,陕西西安710126

出　　处：《郑州大学学报（理学版）》2024年第2期9-17,共9页Journal of Zhengzhou University:Natural Science Edition

基　　金：国家自然科学基金重点项目(U1836203);国家自然科学基金面上项目(61732022,62172436)。

摘　　要：为更好地实现云存储的数据完整性验证,解决云数据安全更新效率低的问题,提出一种基于同态哈希函数和虚拟索引的动态审计方案。首先对上传云服务器的数据进行盲化,以保护原始数据在云中的隐私;接着利用同态哈希算法对盲化后的数据进行签名,以便签名聚合的计算;然后利用虚拟索引实现对特定数据块快速查找和更新的同时,不对其他数据造成影响;最后,将提出的动态云审计方案扩展为批量验证方案,从而提高多用户场景下完整性验证的效率。理论分析表明,该方案是安全高效的。Aiming at the issue of cloud data integrity security and low update efficiency,a dynamic audit scheme based on homomorphic hash function construction was proposed.Firstly,the data was blinded to protect the privacy of the original data in the cloud.Subsequently,homomorphic hash algorithm was used to sign the blind data,which was beneficial to the calculation of signature aggregation.Then,the virtual index was introduced,which could be used to search and update specific data blocks quickly without affecting other data blocks.Finally,the scheme could be extended to batch verification to improve the efficiency of integrity verification in multi-user scenarios.Theoretical analysis showed that the scheme was safe and efficient.

关 键 词：云审计 完整性验证 同态哈希函数 虚拟索引 批量验证 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]