本文選題：云存儲 + 關(guān)系型數(shù)據(jù)��； 參考：《北京郵電大學(xué)》2013年碩士論文

【摘要】：隨著互聯(lián)網(wǎng)和計(jì)算機(jī)應(yīng)用的發(fā)展高速發(fā)展,時(shí)時(shí)刻刻都會產(chǎn)生大量的數(shù)據(jù),我們進(jìn)入了一個(gè)大數(shù)據(jù)時(shí)代。云計(jì)算應(yīng)運(yùn)而生,云存儲作為云計(jì)算的一個(gè)具體應(yīng)用,為大數(shù)據(jù)時(shí)代的個(gè)人,中小企業(yè)和政府部門的提供了一個(gè)相對高效,可靠,成本較低的存儲平臺。云存儲的作為一個(gè)第三方平臺,具有不可信賴性,把敏感數(shù)據(jù)放到上面會出現(xiàn)一定的安全問題,最大威脅來自云存儲的管理者。解決這個(gè)安全問題最有效的辦法是對敏感數(shù)據(jù)加密。對數(shù)據(jù)加密后,完全返回,然后逐一解密,檢索性能急劇下降。本文主要研究云存儲環(huán)境下的關(guān)系型數(shù)據(jù)庫的密文檢索問題。對關(guān)系型數(shù)據(jù)庫中的數(shù)據(jù)加密后,破壞了原有的有序性、可比較性、模糊匹配等特性,數(shù)據(jù)的范圍檢索和模糊檢索變的很困難。 針對上述問題,本文基于關(guān)系型數(shù)據(jù)庫的特點(diǎn),在云存儲的環(huán)境下,提出了關(guān)系數(shù)據(jù)庫中的兩類重要數(shù)據(jù)類型數(shù)值型和字符型的加密策略和檢索策略,并基于云存儲服務(wù)商xeround提供的MySql數(shù)據(jù)庫進(jìn)行了實(shí)現(xiàn)。 本文的主要工作如下： 1.針對云存儲提供的關(guān)系數(shù)據(jù)庫服務(wù)的安全性問題,提出了一種適用于云存儲數(shù)據(jù)庫的加密策略,該策略通過變換初始化向量改變數(shù)據(jù)庫中的密文分布規(guī)律,初始化向量相當(dāng)于密鑰存在客戶端,在數(shù)據(jù)庫中只需要記錄變換次數(shù)即可,可以有效的避免基于頻率攻擊方式的攻擊。在數(shù)據(jù)庫只需存儲一個(gè)TINTINT型數(shù)據(jù),對數(shù)據(jù)庫造成的冗余很小。在此基礎(chǔ)上提出了,提出了基于數(shù)值型密文劃分器和密鑰散列序列的密文檢索方式,這種方式能很好的解決等值檢索和范圍檢索。該檢索方案返回滿足要求的密文,對此密文進(jìn)行解密即可,避免了不必要的解密和數(shù)據(jù)傳輸,提高云存儲數(shù)據(jù)的密文檢索效率。 2.針對云存儲數(shù)據(jù)庫的關(guān)系型數(shù)據(jù)庫中的字符型的模糊檢索問題,提出了對字符型數(shù)據(jù)采用在字符型數(shù)據(jù)前增加一段隨機(jī)字符來避免重復(fù)數(shù)據(jù),然后對該字符串進(jìn)行AES加密的加密方案。檢索方案中提出了基于對偶編碼映射的特征值索引的二次檢索。對密文檢索時(shí),第一次根據(jù)關(guān)鍵字的特征值,檢索索引字段,過濾掉一部分不滿足要求的密文記錄；第二次對返回的記錄進(jìn)行解密,然后再次進(jìn)行檢索,返回滿足要求的值。通過上述方案,提高了字符型密文數(shù)據(jù)的檢索效率和模糊檢索的準(zhǔn)確度。 3.本文對云存儲數(shù)據(jù)庫進(jìn)行了實(shí)現(xiàn),利用云存儲數(shù)據(jù)庫服務(wù)商xeround提供的MySql數(shù)據(jù)庫,結(jié)合基于Java Web經(jīng)典框架SSH(Struts2,Spring,Hibernate),組建了中國社會科學(xué)院研究生圖書館管理平臺,并根據(jù)加密策略,實(shí)現(xiàn)了字符型密文檢索模塊。并進(jìn)行了測試和驗(yàn)證。
[Abstract]:With the rapid development of Internet and computer applications, a large number of data will be generated at all times, and we have entered an era of big data.Cloud computing came into being, cloud storage as a specific application of cloud computing, for big data era of individuals, small and medium-sized enterprises and government departments to provide a relatively efficient, reliable, low-cost storage platform.Cloud storage, as a third party platform, can not be trusted. There will be some security problems when the sensitive data is placed on it, and the biggest threat comes from the managers of cloud storage.The most effective solution to this security problem is to encrypt sensitive data.After encrypting the data, return completely, then decrypt one by one, the retrieval performance drops sharply.This paper mainly studies ciphertext retrieval of relational database in cloud storage environment.After encrypting the data in relational database, the original characteristics of order, comparability and fuzzy matching are destroyed, and the range retrieval and fuzzy retrieval of data become very difficult.In order to solve the above problems, based on the characteristics of relational database, in the cloud storage environment, this paper puts forward two kinds of important data types in relational database: numeric and character encryption strategy and retrieval strategy.It is based on the MySql database provided by cloud storage service provider xeround.The main work of this paper is as follows:1.Aiming at the security of relational database service provided by cloud storage, this paper proposes an encryption strategy suitable for cloud storage database, which changes the distribution of ciphertext in database by changing initialization vector.Initialization vector is equivalent to the existence of the key in the client, only need to record the number of changes in the database, can effectively avoid attacks based on frequency attack.Only one TINTINT type of data is stored in the database, resulting in minimal redundancy to the database.On this basis, a new ciphertext retrieval method based on numeric ciphertext divider and key hash sequence is proposed, which can solve the problem of equivalent retrieval and range retrieval.The retrieval scheme returns ciphertext that meets the requirements, which can be decrypted, thus avoiding unnecessary decryption and data transmission, and improving the efficiency of ciphertext retrieval for cloud storage data.2.Aiming at the fuzzy retrieval problem of character type in relational database of cloud storage database, this paper puts forward a method to avoid repeating data by adding a random character before character type data.The string is then encrypted by AES encryption.In the retrieval scheme, the quadratic retrieval of eigenvalue index based on dual coding mapping is proposed.In the ciphertext retrieval, the index field is first retrieved according to the characteristic value of the keyword, and a part of the ciphertext record that does not meet the requirements is filtered out. The returned record is decrypted in the second time, and then retrieved again to return the required value.The efficiency of character ciphertext retrieval and the accuracy of fuzzy retrieval are improved.3.In this paper, the cloud storage database is implemented. The management platform of graduate student library of Chinese Academy of Social Sciences is set up based on the Java Web classic framework, which is based on the MySql database provided by the cloud storage service provider xeround, and according to the encryption strategy.The character-type ciphertext retrieval module is implemented.The test and verification were carried out.
【學(xué)位授予單位】：北京郵電大學(xué)
【學(xué)位級別】：碩士
【學(xué)位授予年份】：2013
【分類號】：TP333;TP309.7

【參考文獻(xiàn)】

相關(guān)期刊論文 前9條

1 石強(qiáng);趙鵬遠(yuǎn);;云存儲安全關(guān)鍵技術(shù)分析[J];河北省科學(xué)院學(xué)報(bào);2011年03期

2 余祥宣,閔銳;一種加密數(shù)據(jù)庫的快速查詢算法[J];華中理工大學(xué)學(xué)報(bào);1998年09期

3 楊勇,方勇,周安民;秘密同態(tài)技術(shù)研究及其算法實(shí)現(xiàn)[J];計(jì)算機(jī)工程;2005年02期

4 馬勺布,胡磊,徐德啟;一種動(dòng)態(tài)安全的密文數(shù)據(jù)庫檢索方法[J];計(jì)算機(jī)工程;2005年06期

5 田秀彥;李忠;羅士美;鄧力強(qiáng);;基于Struts+Hibernate+Spring的整合架構(gòu)及其在Web開發(fā)中的應(yīng)用[J];計(jì)算機(jī)與現(xiàn)代化;2008年11期

6 戴一奇,尚杰,蘇中民;密文數(shù)據(jù)庫的快速檢索[J];清華大學(xué)學(xué)報(bào)(自然科學(xué)版);1997年04期

7 馮登國;張敏;張妍;徐震;;云計(jì)算安全研究[J];軟件學(xué)報(bào);2011年01期

8 黃永峰;張久嶺;李星;;云存儲應(yīng)用中的加密存儲及其檢索技術(shù)[J];中興通訊技術(shù);2010年04期

9 李希明;;企業(yè)應(yīng)用云存儲技術(shù)探索[J];信息與電腦;2012年06期

，

本文編號：1765849