基于区块链的动态多云多副本数据完整性审计方法研究  

Blockchain-Based Dynamic Multi-Cloud Multi-Replica Data Integrity Auditing

作　　者：王晨旭 孙一帆[1] 柳博洋 师金宸 沈彦成 王伟 WANG Chen-Xu;SUN Yi-Fan;LIU Bo-Yang;SHI Jin-Chen;SHEN Yan-Cheng;WANG Wei(School of Software Engineering,Xi’an Jiaotong University,Xi’an 710049;MOE Key Lab of Intelligent Network and Network Security,Xi’an Jiaotong University,Xi’an 710049)

机构地区：[1]西安交通大学软件学院,西安710049 [2]西安交通大学智能网络与网络安全教育部重点实验室,西安710049

出　　处：《计算机学报》2025年第2期497-516,共20页Chinese Journal of Computers

基　　金：国家重点研发计划(2021YFF0900904);国家自然科学基金项目(62272379,T2341003,U22B2019,U21A20463,U22B2027,U23A20304);陕西省自然科学基金(2021JM-018);中央高校基本科研业务费(xzy012023068);北京市基金-区块链(M23019)的资助。

摘　　要：随着云计算技术的快速发展和云存储服务的日益普及,众多用户选择将数据托管至云存储平台。然而,数据一旦外包,便存在失去控制权的风险,尤其是对数据安全性有较高要求的用户,需定期验证云上数据的完整性。传统的数据完整性审计方法依赖于第三方审计员来执行数据审查,不可避免地引入了第三方信任问题。为了增强数据的可靠性,部分用户会创建数据的多个副本,并将其分散存储于不同的服务器上。然而,现有的多云多副本数据完整性审计算法存在计算效率低下的问题。针对上述挑战,本文提出了一种基于区块链的动态多云多副本数据完整性审计方法。该方法通过在区块链上部署智能合约,自动执行数据审计并提供可信的审计结果,有效解决了第三方信任问题。通过优化审计算法中的标签生成机制,显著减少了群上乘法和幂运算的次数,并将验证过程中的累乘操作简化为累加操作,从而降低了算法的计算成本。此外,本研究还对所提模型进行了严格的安全性分析和大量的实验验证,并与其他数据完整性审计方法在不同参数设置下进行了比较,充分证明了所提出方法在安全性和有效性方面的优越性。With the rapid development of cloud computing and the widespread popularity of cloud storage,many users store their data on cloud storage servers.However,once the data is outsourced,there is a risk of losing control of the data.Users requiring high data security need to regularly check the integrity of the data on the cloud.Traditional data integrity auditing schemes usually rely on third-party auditors,leading to third-party trust issues.In addition,some users generate multiple replicas of their data and store them on different servers to enhance data reliability.However,existing multi-cloud multi-replica data integrity auditing algorithms are significantly deficient in terms of computational efficiency.To address the above problems,this paper proposes a dynamic multi-cloud multi-replica data integrity auditing scheme based on blockchain.By deploying smart contracts on the blockchain for data auditing,it can provide trustworthy results and effectively solves the trust problem.By optimizing the tag generation mechanism in the auditing algorithm,it significantly reduces the number of group multiplication operations and power operations in the tag generation process.It also transforms a large number of group multiplication operations into simpler addition operations in the verification process,significantly reducing the computational overhead.Besides,this paper carries out a rigorous security analysis and extensive experiments.The experimental results obtained by comparing with other data integrity auditing methods under different parameters verify the security and effectiveness of the proposed method.

关 键 词：区块链 云存储 多云多副本存储 数据完整性审计 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]