發(fā)布時間：2018-05-06 19:42

  本文選題：云存儲 + 完整性驗證��； 參考：《電子科技大學(xué)》2017年碩士論文

【摘要】：在云存儲環(huán)境中,文件所有者在將其文件從本地轉(zhuǎn)移到云端進(jìn)行在線存儲后,在節(jié)省本地空間的同時也失去了對文件的物理控制能力。而云存儲系統(tǒng)的服務(wù)器由于其中存儲著大量有價值的文件和數(shù)據(jù),另外云存儲系統(tǒng)的服務(wù)器通常部署在公共網(wǎng)絡(luò)上,常常成為網(wǎng)絡(luò)攻擊的目標(biāo),同時云存儲系統(tǒng)為了獲得海量的存儲能力,使用了數(shù)量巨大的硬件存儲設(shè)備,硬件數(shù)量的增加,使得不出現(xiàn)故障的可能性降低,甚至?xí)沟霉收系某霈F(xiàn)成為常態(tài)。由于上述原因,在用戶使用云存儲服務(wù)對文件進(jìn)行在線托管時,對這些文件的完整性進(jìn)行檢查有其必要性。傳統(tǒng)的完整性驗證技術(shù)需要驗證者對文件具有完全的物理控制能力,會給云存儲服務(wù)器以及網(wǎng)絡(luò)帶寬造成較大負(fù)擔(dān)�，F(xiàn)有對云端的文件進(jìn)行完整性檢查的研究存在著效率較低、不支持動態(tài)操作等問題。本文在已有的完整性檢查技術(shù)和協(xié)議的基礎(chǔ)上,對現(xiàn)有工作中存在的不足之處開展研究,提出一種實用性更高的協(xié)議,以便對云端文件的完整性進(jìn)行保護(hù)和檢查。本文的主要創(chuàng)新點包括:1.基于跳表提出一種能夠?qū)ν暾赃M(jìn)行檢查的數(shù)據(jù)結(jié)構(gòu)本文基于跳躍列表和可用于進(jìn)行完整性驗證的默克爾哈希樹,提出了一種能夠用于對文件的完整性進(jìn)行驗證,且能夠高效地執(zhí)行節(jié)點插入與刪除的數(shù)據(jù)結(jié)構(gòu)(Acyclic Certificate Skip Lists,ACSL),該數(shù)據(jù)結(jié)構(gòu)中節(jié)點之間無固定關(guān)系,并且引入了可達(dá)計數(shù)用于代替索引來進(jìn)行節(jié)點的查找,從而解決了默克爾哈希樹不支持節(jié)點插入與刪除的不足;2.提出一種安全協(xié)議,可以公開檢查云端文件的完整性本文基于ACSL,提出一種針對云存儲系統(tǒng)的動態(tài)數(shù)據(jù)完整性驗證協(xié)議(Dynamic Data Integrity Verifying,DDIV)。由于使用了本文所提出的ACSL數(shù)據(jù)結(jié)構(gòu),DDIV除具備對完整性進(jìn)行檢查的基本功能外,還能夠高效地執(zhí)行對文件的更新、追加等動態(tài)操作,同時在DDIV中使用非對稱密碼體制對ACSL中的關(guān)鍵信息進(jìn)行簽名,使得除文件所有者之外的任意使用者,都能夠在獲取文件所有者的公鑰后,檢查云端文件的完整性,而無需可信第三方的支持,相比于現(xiàn)有的支持公開驗證的協(xié)議,DDIV有效的消除了系統(tǒng)的性能瓶頸。
[Abstract]:In the cloud storage environment, the file owner can save the local space and lose the physical control of the file after transferring the file from the local to the cloud for online storage. The servers of cloud storage systems store a lot of valuable files and data. In addition, the servers of cloud storage systems are usually deployed on public networks and are often the target of network attacks. At the same time, cloud storage system in order to obtain massive storage capacity, the use of a large number of hardware storage devices, the increase in the number of hardware, so that the possibility of failure will be reduced, and even make the occurrence of fault become the normal. For these reasons, it is necessary to check the integrity of files when users use cloud storage services to host files online. The traditional integrity verification technology requires the verifier to have complete physical control over the file, which will create a great burden on the cloud storage server and the network bandwidth. The existing researches on the integrity check of the files in the cloud have some problems such as low efficiency and no support for dynamic operation. Based on the existing integrity checking techniques and protocols, this paper studies the shortcomings of the existing work and proposes a more practical protocol to protect and check the integrity of cloud files. The main innovations of this paper include: 1. Based on hopping table, this paper presents a data structure that can check the integrity of the file. Based on the hopping list and the Merkel hash tree which can be used to verify the integrity of the file, this paper proposes a new method that can be used to verify the integrity of the file. And the data structure which can be inserted and deleted efficiently is acyclic Certificate Skip / ACSL, in which there is no fixed relation between nodes, and the reachable count is introduced to replace the index to search the node. This resolves the lack of node insertion and deletion in the Merkel Hash Tree. A security protocol is proposed to publicly check the integrity of cloud files. This paper presents a dynamic Data Integrity verification protocol for cloud storage systems based on ACSL-based dynamic data integrity verification protocol. Because of the use of the ACSL data structure proposed in this paper, in addition to the basic function of checking the integrity, it can also efficiently perform dynamic operations such as updating and appending files, etc. At the same time, the asymmetric cryptosystem is used in DDIV to sign the key information in ACSL, so that any user other than the file owner can check the integrity of the cloud file after obtaining the public key of the file owner. Without the support of trusted third parties, DDIV effectively eliminates the performance bottleneck of the system compared with the existing protocol which supports public verification.
【學(xué)位授予單位】：電子科技大學(xué)
【學(xué)位級別】：碩士
【學(xué)位授予年份】：2017
【分類號】：TP333

【參考文獻(xiàn)】

相關(guān)期刊論文 前10條

1 李勇;姚戈;雷麗楠;張曉菲;楊鯤;;基于多分支路徑樹的云存儲數(shù)據(jù)完整性驗證機制[J];清華大學(xué)學(xué)報(自然科學(xué)版);2016年05期

2 趙洋;王士雨;吳松洋;熊虎;;一種代理遠(yuǎn)程數(shù)據(jù)完整性審計協(xié)議[J];電子科技大學(xué)學(xué)報;2016年01期

3 秦志光;王士雨;趙洋;熊虎;吳松洋;;云存儲服務(wù)的動態(tài)數(shù)據(jù)完整性審計方案[J];計算機研究與發(fā)展;2015年10期

4 徐津;溫巧燕;王大印;;一種基于Hash函數(shù)和分組密碼的消息認(rèn)證碼[J];計算機學(xué)報;2015年04期

5 譚霜;賈焰;韓偉紅;;云存儲中的數(shù)據(jù)完整性證明研究及進(jìn)展[J];計算機學(xué)報;2015年01期

6 胡衛(wèi);張煥國;魏國珩;付偉;;基于ElGamal簽名方案的云數(shù)據(jù)完整性感知方法[J];武漢大學(xué)學(xué)報(理學(xué)版);2013年06期

7 LI Chaoling;CHEN Yue;TAN Pengxu;YANG Gang;;Towards Comprehensive Provable Data Possession in Cloud Computing[J];Wuhan University Journal of Natural Sciences;2013年03期

8 鄧曉鵬;馬自堂;高敏霞;;一種基于雙線性對的云數(shù)據(jù)完整性驗證算法[J];計算機應(yīng)用研究;2013年07期

9 顏湘濤;李益發(fā);;基于哈希樹的云存儲完整性檢測算法[J];計算機科學(xué);2012年12期

10 曹夕;許力;陳蘭香;;云存儲系統(tǒng)中數(shù)據(jù)完整性驗證協(xié)議[J];計算機應(yīng)用;2012年01期

相關(guān)碩士學(xué)位論文 前1條

1 李志科;云存儲中數(shù)據(jù)完整性驗證及去重技術(shù)研究[D];廣東工業(yè)大學(xué);2015年

，

本文編號：1853619