發(fā)布時(shí)間：2018-06-25 18:42

  本文選題：云存儲(chǔ) + 可搜索加密　； 參考：《蘭州理工大學(xué)》2017年碩士論文

【摘要】：云存儲(chǔ)具有高擴(kuò)展性、無(wú)接入限制、廉價(jià)及易管理等優(yōu)點(diǎn),可使眾多中小企業(yè)和用戶擺脫系統(tǒng)的搭建和維護(hù)的麻煩,減輕了用戶存儲(chǔ)成本,具有廣闊的市場(chǎng)前景。它的出現(xiàn),徹底改變了人們傳統(tǒng)的存儲(chǔ)觀念。用戶將大量的數(shù)據(jù)存儲(chǔ)在云服務(wù)器上,失去了對(duì)數(shù)據(jù)的絕對(duì)控制,云服務(wù)器也變得不可信。為了解決云上數(shù)據(jù)安全性問(wèn)題,研究人員提出將數(shù)據(jù)加密之后存放在云上。這種方式在一定程度上保證了數(shù)據(jù)的安全性,但是會(huì)導(dǎo)致數(shù)據(jù)共享和使用效率的問(wèn)題。可搜索加密技術(shù)就是一種支持密文檢索的技術(shù),高效動(dòng)態(tài)的可搜索加密機(jī)制正是廣大研究者共同追求的目標(biāo)。Seny Kamara提出的動(dòng)態(tài)可搜索加密機(jī)制采用“關(guān)鍵字-文件標(biāo)識(shí)符”的索引結(jié)構(gòu),通過(guò)建立搜索數(shù)組和刪除數(shù)組實(shí)現(xiàn)索引的動(dòng)態(tài)更新。該機(jī)制在關(guān)鍵字集合較大時(shí),索引空間消耗較高,搜索效率低下;在文件更新時(shí)涉及的數(shù)據(jù)結(jié)構(gòu)較多,更新流程復(fù)雜。本文改進(jìn)了Seny Kamara的動(dòng)態(tài)可搜索加密機(jī)制,降低了索引的空間消耗,提高了搜索效率。在改進(jìn)的機(jī)制中,用戶上傳數(shù)據(jù)之前首先在本地生成“關(guān)鍵字-比特字符串”的索引結(jié)構(gòu);然后連同數(shù)據(jù)文件一同加密上傳至云服務(wù)器。檢索時(shí),用戶在本地生成檢索令牌并發(fā)往云服務(wù)器,云服務(wù)器收到令牌后在加密索引中進(jìn)行匹配,找到與令牌對(duì)應(yīng)的文件后發(fā)送給用戶。更新時(shí),生成對(duì)應(yīng)的添加、刪除令牌,云服務(wù)器根據(jù)給定算法在服務(wù)端進(jìn)行更新操作。該機(jī)制采用“關(guān)鍵字-比特字符串”的索引結(jié)構(gòu),減少了索引的存儲(chǔ)空間,提高了搜索效率,并且具有更好的動(dòng)態(tài)性。通過(guò)安全性分析和實(shí)驗(yàn),證明了本方案的安全性和可行性。本文同時(shí)對(duì)多線程方式處理文件加解密進(jìn)行了研究。結(jié)合多線程技術(shù),提高用戶上傳與下載文件的加解密效率。實(shí)驗(yàn)表明多線程處理方式的效率較單線程有了很大提高,并將其應(yīng)用到云存儲(chǔ)系統(tǒng)中。
[Abstract]:Cloud storage has the advantages of high expansibility, no access restriction, low cost and easy management. It can make many small and medium-sized enterprises and users get rid of the trouble of system construction and maintenance, reduce the cost of user storage, and have a broad market prospect. Its appearance, has completely changed people's traditional storage idea. Users store large amounts of data on cloud servers, losing absolute control of the data, and cloud servers become untrustworthy. In order to solve the problem of data security in the cloud, the researchers propose to encrypt the data and store it on the cloud. This method ensures the security of data to some extent, but it will lead to the problem of data sharing and efficiency. Searchable encryption is a technology that supports ciphertext retrieval. The efficient and dynamic searchable encryption mechanism is the target of the common pursuit of many researchers. Seny Kamara's dynamic searchable encryption mechanism adopts the index structure of "keyword-file identifier". The index is dynamically updated by creating a search array and deleting an array. When the keyword set is large, the index space consumption is high, the search efficiency is low, the data structure is more involved in the file update, and the updating process is complex. In this paper, the dynamic searchable encryption mechanism of Seny Kamara is improved, the space consumption of index is reduced and the search efficiency is improved. In the improved mechanism, the user first generates the index structure of "keyword-bit string" locally before uploading the data, and then encrypts and uploads it to the cloud server together with the data file. When retrieving, the user generates the retrieval token locally and sends it to the cloud server. After receiving the token, the cloud server matches in the encrypted index, finds the file corresponding to the token and sends it to the user. When updating, corresponding additions are generated, tokens are deleted, and the cloud server updates on the server side according to the given algorithm. This mechanism adopts the index structure of "keyword-bit string", reduces the storage space of the index, improves the search efficiency, and has a better dynamic property. The safety and feasibility of this scheme are proved by safety analysis and experiment. At the same time, this paper studies the multi-thread processing file encryption and decryption. Combining multi-thread technology to improve the efficiency of user upload and download files encryption and decryption. Experiments show that the efficiency of multithread processing is much higher than that of single thread, and it is applied to cloud storage system.
【學(xué)位授予單位】：蘭州理工大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2017
【分類號(hào)】：TP309.7;TP333

【參考文獻(xiàn)】

相關(guān)期刊論文 前10條

1 梁棟;凌婧;馮俊青;;基于NAS的私有云存儲(chǔ)系統(tǒng)研究與設(shè)計(jì)[J];電子測(cè)試;2015年17期

2 高樹(shù)靜;曲英杰;宋廷強(qiáng);;基于單向函數(shù)的偽隨機(jī)數(shù)發(fā)生器[J];計(jì)算機(jī)研究與發(fā)展;2015年06期

3 呂曉霞;王儷璇;張燕;;元數(shù)據(jù)和數(shù)據(jù)分離的安全云存儲(chǔ)體系結(jié)構(gòu)的設(shè)計(jì)[J];計(jì)算機(jī)安全;2014年04期

4 曾春金;;云存儲(chǔ)在視頻業(yè)務(wù)中的應(yīng)用[J];鐵道通信信號(hào);2013年09期

5 員建廈;;基于云存儲(chǔ)技術(shù)的存儲(chǔ)架構(gòu)模型[J];計(jì)算機(jī)與網(wǎng)絡(luò);2013年07期

6 傅穎勛;羅圣美;舒繼武;;安全云存儲(chǔ)系統(tǒng)與關(guān)鍵技術(shù)綜述[J];計(jì)算機(jī)研究與發(fā)展;2013年01期

7 李美云;李劍;黃超;;基于同態(tài)加密的可信云存儲(chǔ)平臺(tái)[J];信息網(wǎng)絡(luò)安全;2012年09期

8 李禮;;淺析計(jì)算機(jī)網(wǎng)絡(luò)存儲(chǔ)技術(shù)[J];信息與電腦(理論版);2011年04期

9 黃永峰;張久嶺;李星;;云存儲(chǔ)應(yīng)用中的加密存儲(chǔ)及其檢索技術(shù)[J];中興通訊技術(shù);2010年04期

10 張蓓;王曉明;;帶關(guān)鍵詞檢索的公鑰加密方案[J];計(jì)算機(jī)工程;2010年06期

相關(guān)會(huì)議論文 前1條

1 鄭文武;李先緒;黃植勤;邱紅飛;;云存儲(chǔ)關(guān)鍵技術(shù)[A];2012全國(guó)無(wú)線及移動(dòng)通信學(xué)術(shù)大會(huì)論文集（下）[C];2012年

相關(guān)博士學(xué)位論文 前1條

1 陳卓;改善P2P流媒體系統(tǒng)服務(wù)能力的架構(gòu)和機(jī)制研究[D];電子科技大學(xué);2013年

相關(guān)碩士學(xué)位論文 前5條

1 李東東;基于RADIUS屬性的認(rèn)證網(wǎng)關(guān)的研究[D];北京林業(yè)大學(xué);2015年

2 陳露;基于CDN-P2P技術(shù)的流媒體自適應(yīng)分發(fā)系統(tǒng)的研究[D];電子科技大學(xué);2014年

3 鄭文曉;IPv6環(huán)境下基于DHT的P2P媒體共享系統(tǒng)的研究與實(shí)現(xiàn)[D];北京郵電大學(xué);2014年

4 蔡官明;開(kāi)放式云存儲(chǔ)服務(wù)平臺(tái)設(shè)計(jì)及移動(dòng)云盤應(yīng)用開(kāi)發(fā)[D];華南理工大學(xué);2013年

5 田瑞云;基于Hadoop的CDN-P2P系統(tǒng)中內(nèi)容預(yù)測(cè)機(jī)制研究與實(shí)現(xiàn)[D];北京郵電大學(xué);2013年

，

本文編號(hào)：2067093