无双线性对的高效云存储数据审计方案

doi:10.19665/j.issn1001-2400.2022.01.005

西安电子科技大学学报 ›› 2022, Vol. 49 ›› Issue (1): 47-54.doi: 10.19665/j.issn1001-2400.2022.01.005

• 隐私计算与数据安全专题 • 上一篇下一篇

无双线性对的高效云存储数据审计方案

杨海滨^1,²(),李瑞峰¹(),易铮阁¹(),钮可^1,²(),杨晓元²()

1.武警工程大学密码工程学院,陕西西安 710086
2.网络与信息安全武警部队重点实验室,陕西西安 710086

收稿日期:2021-09-16 出版日期:2022-02-20 发布日期:2022-04-27
通讯作者: 李瑞峰,杨晓元
作者简介:杨海滨(1982—),男,副教授,博士,E-mail: 54537959@qq.com;|易铮阁(1999—),男,武警工程大学硕士研究生,E-mail: 1713621192@qq.com;|钮可(1981—),男,副教授,博士,E-mail: niuke@163.com
基金资助:
国家重点研发计划项目(2017YFB0802000);国家自然科学基金(62172436);武警工程大学基础前沿研究基金(WJY202014)

Efficient cloud storage data auditing scheme without bilinear pairing

YANG Haibin^1,²(),LI Ruifeng¹(),YI Zhengge¹(),NIU Ke^1,²(),YANG Xiaoyuan²()

1. College of Cryptographic Engineering,Engineering University of PAP,Xi'an 710086,China
2. Key Laboratory of Network and Information Security of the PAP,Xi'an 710086,China

Received:2021-09-16 Online:2022-02-20 Published:2022-04-27
Contact: Ruifeng LI,Xiaoyuan YANG

摘要/Abstract

摘要：

在现有的云存储数据完整性审计方案中,只有少量标签参与完整性验证工作,大部分数据标签处于闲置状态,造成了计算与存储资源的浪费。针对此问题,构造了一种无双线性对的高效云存储数据审计方案。该方案使用Schnorr签名算法,只针对被审计数据块生成标签,不仅降低了用户的计算开销,而且能对数据高效地进行增加、删除、修改等动态更新。在挑战阶段,使用区块链技术,利用时间戳生成挑战参数,以确保挑战参数的随机性,云服务商和第三方审计者无须进行交互,降低了通信开销。在整个审计阶段,方案避免了双线性映射、幂指数、点映射哈希函数等大开销运算。通过安全性分析证明,该方案是安全且有效的,不仅能够抵抗来自云服务提供商的伪造攻击、重放攻击,而且能够实现对数据与私钥的隐私进行保护。在效率分析部分,通过数值分析与实验分析证明,与现有云存储数据完整性审计方案相比,该方案的审计效率与动态更新效率较高,而且随着数据块、挑战块数量的增加,优势更加明显。

关键词: 云存储, 云安全, 无双线性对, 动态数据, 持有性证明

Abstract:

In the existing cloud storage data integrity auditing schemes,only a few tags participate in integrity verification,with most of the data tags idle,which causes the waste of computing and storage resources.To solve this problem,this paper constructs an efficient cloud storage data auditing scheme without bilinear pairs.The scheme uses the Schnorr Signature Algorithm to generate labels only for the audited data blocks,which reduces the user's computing overhead.It can efficiently complete dynamic updates to the data.In the challenge phase,blockchain technology is used to generate challenge parameters by using the timestamp to ensure the randomness of challenge parameters.The cloud service provider and third-party auditor do not need to interact,which reduces the communication overhead.In the whole auditing phase,the scheme avoids large overhead operations such as bilinear mapping,power exponent,point mapping hash function and so on.The security analysis shows that the scheme is safe and effective,and that it can resist forgery attacks and replay attacks from cloud service providers and protect the privacy of data and private key.In the efficiency analysis part,numerical analysis and experimental analysis show that the scheme has a higher auditing efficiency and dynamic update efficiency compared with the existing cloud auditing schemes.Moreover,with the increase of the number of data blocks and challenge blocks,its advantages are more obvious.

Key words: cloud storage, cloud security, pairing free, dynamic data, possession proving

中图分类号:

TP309.7

杨海滨,李瑞峰,易铮阁,钮可,杨晓元. 无双线性对的高效云存储数据审计方案[J]. 西安电子科技大学学报, 2022, 49(1): 47-54.

YANG Haibin,LI Ruifeng,YI Zhengge,NIU Ke,YANG Xiaoyuan. Efficient cloud storage data auditing scheme without bilinear pairing[J]. Journal of Xidian University, 2022, 49(1): 47-54.

图/表 6

表1

表2

计算开销对比"

方案	TagGen	GenProof	VerifyProof
文献[6]	nH'+nM_G+2nE_G=5.842 2n	2cM_G+c $E Z P$ +c $A Z P$ =2.686 4c	(c+1)M_G+(c+1)E_G+cH'+2P =4.587 6c+14.260 9
文献[7]	nH'+nA_G+nM'_G+nE'_G =8.278 1n	cE_G+cM_G+cM'_G+cA_G =5.687 9c	cH'+(c+2)(E'_G+M'_G)+2P+cM_G +cA_G=9.593 8c+23.927 6
文献[8]	nH'+2nE_G+nM'_G=7.501 8n	cM'_G+cE_G+c $M Z P$ +c $A Z P$ =4.232 8c	(c+2)P+cH'+(c+1)M'_G+E_G =12.092 5c+14.665 9
文献[9]	nH+3nE_G+nM_G+ns $M Z P$ + ns $A Z P$ =(5.079 5+0.002 9s)n	cs $M Z P$ +cs $A Z P$ +E_G+M'_G =0.002 9sc+4.229 9	c $M Z P$ +c $A Z P$ +(s+1)E_G+sM'_G+2P =0.002 9c+4.229 9s+12.945 2
文献[10]	nH'+2nE_G+nE'_G+nM'_G =10.645n	c $M Z P$ +c $A Z P$ +cE_G+cM'_G =4.232 8n	cH+2cM'_G+cM_G+2cE'_G+2P =13.557 2n+11.690 6
本方案	2nM_G+nH+n $M Z P$ +2c $M Z P$ + c $A Z P$ =2.632 9n+0.004 3c	c $M Z P$ +c $A Z P$ =0.002 9c	(2c+1)M_G+2cA_G=2.916c+1.315 7

表2

表3

图1

图2

图3

参考文献 16

[1]	ATENIESE G, BURNS R, CURTMOLA R, et al. Provable Data Possession at Untrusted Stores[C]// Acm Conference on Computer & Communications Security. New York: ACM, 2007:598-609.
[2]	WANG C, CHOW S, WANG Q, et al. Privacy-Preserving Public Auditing for Secure Cloud Storage[J]. IEEE Transactions on Computers, 2013, 62(2):362-375. doi: 10.1109/TC.2011.245
[3]	任静思, 王劲林, 陈晓, 等. 一种多副本动态数据持有性证明方案[J]. 西安电子科技大学学报, 2017, 44(6):156-161.
	REN Jingsi, WANG Jinlin, CHEN Xiao, et al. Provable Multi-copy Dynamic Data Possession in Cloud Storage[J]. Journal of Xidian University, 2017, 44(6):156-161.
[4]	ERWAY C C, KUPCU A, PAPAMANTHOU C, et al. Dynamic Provable Data Possession[J]. ACM Transaction on Information and System Security, 2015, 17(4):1-29.
[5]	WANG Q, WANG C, REN K, et al. Enabling Public Auditability and Data Dynamics for Storage Security in Cloud Computing[J]. IEEE Transactions on Parallel and Distributed Systems, 2011, 22(5):847-859. doi: 10.1109/TPDS.2010.183
[6]	JIN H, JIANG H, ZHOU K. Dynamic and Public Auditing with Fair Arbitration for Cloud Data[J]. IEEE Transactions on Cloud Computing, 2016, 6(3):680-693. doi: 10.1109/TCC.2016.2525998
[7]	TIAN H, CHEN Y X, CHANG C C, et al. Dynamic-Hash-Table Based Public Auditing for Secure Cloud Storage[J]. IEEE Transactions on Services Computing, 2017, 10(5):701-714. doi: 10.1109/TSC.2015.2512589
[8]	SHEN J, SHEN J, Chen X F, et al. An Efficient Public Auditing Protocol with Novel Dynamic Structure for Cloud Data[J]. IEEE Transactions on Information Forensics and Security, 2017, 12(10):2402-2415. doi: 10.1109/TIFS.2017.2705620
[9]	GUO W, ZHANG H, QIN S J, et al. Outsourced Dynamic Provable Data Possession with Batch Update for Secure Cloud Storage[J]. Future Generation Computer Systems, 2019, 95:309-322. doi: 10.1016/j.future.2019.01.009
[10]	HOU G P, MA J F, LIANG C, et al. Efficient Audit Protocol Supporting Virtual Nodes in Cloud Storage[J]. Transactions on Emerging Telecommunications Technologies, 2020, 32(5):1-14.
[11]	KASYOKA P, KIMWELE M, ANGOLO S M. Cryptanalysis of a Pairing-Free Certificateless Signcryption Scheme[J]. ICT Express, 2020, 7(2):200-204. doi: 10.1016/j.icte.2020.07.006
[12]	赵洋, 任化强, 熊虎, 等. 无双线性对的云数据完整性验证方案[J]. 信息网络安全, 2015, 15(7):7-12.
	ZHAO Yang, REN Huaqiang, XIONG Hu, et al. Cloud Data Integrity Verification Scheme without Bilinear Pairing[J]. Netinfo Security, 2015, 15(7):7-12.
[13]	孙长洪. 基于无双线性对的云端数据完整性审计方案研究[D]. 武汉: 华中科技大学, 2018:1-88.
[14]	WANG C, CHOW S S M, WANG Q, et al. Privacy-Preserving Public Auditing for Secure Cloud Storage[J]. IEEE Transactions on Computers, 2013, 62(2):362-375. doi: 10.1109/TC.2011.245
[15]	翟社平, 汪一景, 陈思吉. 区块链技术在电子病历共享的应用研究[J]. 西安电子科技大学学报, 2020, 47(5):103-112.
	ZHAI Sheping, WANG Yijing, CHEN Siji. Research on the Application of Blockchain Technology in the Sharing of Electronic Medical Records[J]. Journal of Xidian University, 2020, 47(5):103-112.
[16]	MAXWELL G, POELSTRA A, SEURIN Y, et al. Simple Schnorr Multi-Signatures with Applications to Bitcoin[J]. Designs,Codes and Cryptography, 2019, 87(9):2139-2164. doi: 10.1007/s10623-019-00608-x

符号	描述	运行时间/ms
A_Zp	Z_p上加法运算	0.001 40
M_Zp	Z_p上乘法运算	0.001 50
E_Zp	Z_p上幂运算	0.053 60
A_G	G上加法运算	0.142 30
M_G	G与整数的乘法运算	1.315 70
M'_G	G上的乘法运算	2.975 30
E_G	G的整数幂运算	1.254 60
E'_G	G上的幂运算	3.143 20
H	映射到Z_p的哈希运算	0.000 02
H'	映射到G的哈希运算	2.017 30
P	双线性对运算	5.845 30

方案	数据结构	动态更新通信开销	动态更新计算开销
文献[6]	索引转换表	3\|i\|+15\|p\|+2\|G\|+2\|m\|	2H'+2M'_G+2E_G+2E'_G
文献[7]	动态哈希表	6\|i\|+16\|p\|+2\|G\|+3\|m\|	2H'+2M'_G+2E'_G+2A_G+2P
文献[8]	双向链接信息表	6\|i\|+23\|p\|+2\|G\|+2\|m\|	2H'+2M'_G+4E_G
文献[9]	基于秩默克尔树	3\|i\|+5\|p\|+2\|G\|+2\|m\|	2H'+2sM_Zp+2M'_G+4E_G+2E'_G
文献[10]	默克尔哈希树	3\|i\|+3\|p\|+2\|G\|+2\|m\|	2H'+2M'_G+4E_G+2E'_G
本方案	索引表	6\|i\|+3\|p\|+3\|G\|+2\|m\|	2H+2M_Zp+3M_G

无双线性对的高效云存储数据审计方案

Efficient cloud storage data auditing scheme without bilinear pairing

RichHTML

PDF (PC)

赞

可视化

摘要/Abstract

引用本文

使用本文

图/表 6

参考文献 16

相关文章 4

Metrics

本文评价

推荐阅读 0

[1]	任静思;王劲林;陈晓;叶晓舟. 一种多副本动态数据持有性证明方案[J]. 西安电子科技大学学报, 2017, 44(6): 156-161+174.
[2]	李昊星;李凤华;宋承根;苏铓;刘歆. 支持多关键字的可搜索公钥加密方案[J]. J4, 2015, 42(5): 20-25.
[3]	李立亚;胡晓红;辛振国. 一种由智能终端控制的数据同步算法[J]. J4, 2013, 40(2): 172-180+212.
[4]	李立亚. 一种由智能终端控制的数据同步算法[J]. J4, 2013, 40(2): 172-180.