【摘要】：大數(shù)據(jù)時(shí)代的到來,傳統(tǒng)關(guān)系型數(shù)據(jù)庫(kù)在存取速率等方面越來越無法滿足海量數(shù)據(jù)處理的需求,NoSQL數(shù)據(jù)庫(kù)應(yīng)運(yùn)而生。與關(guān)系型數(shù)據(jù)庫(kù)相比,NoSQL數(shù)據(jù)庫(kù)在安全方面存在不足。HBase分布式數(shù)據(jù)庫(kù)是一種安全機(jī)制比較完善的NoSQL數(shù)據(jù)庫(kù),但HBase數(shù)據(jù)庫(kù)中的數(shù)據(jù)文件卻是以明文形式存儲(chǔ)的,這便形成一定的安全漏洞。為HBase數(shù)據(jù)庫(kù)中的數(shù)據(jù)文件進(jìn)行加密處理,并為HBase數(shù)據(jù)庫(kù)構(gòu)建密文安全二級(jí)索引,使得HBase密文數(shù)據(jù)庫(kù)具有條件查詢能力是非常具有意義的。根據(jù)HBase分布式數(shù)據(jù)庫(kù)中列數(shù)據(jù)的數(shù)據(jù)類型的不同可以分別研究數(shù)值型密文檢索和文本型密文檢索。對(duì)于HBase分布式數(shù)據(jù)庫(kù)中數(shù)值型數(shù)據(jù)的密文檢索,提出一種基于改進(jìn)型安全R樹的檢索策略。在為HBase的數(shù)據(jù)表的數(shù)據(jù)構(gòu)建R樹安全索引時(shí),會(huì)利用R樹的動(dòng)態(tài)特性根據(jù)數(shù)據(jù)表構(gòu)建索引需要的列值來將RowKey行按照設(shè)定的加密策略存入到索引表的恰當(dāng)位置。同時(shí)采用將HBase的數(shù)據(jù)表DataTable相對(duì)應(yīng)的索引表IndexTable存入HBase中來確保對(duì)索引表使用與維護(hù)。這種方式能夠很好的支持針對(duì)列的等值檢索與范圍檢索。對(duì)于HBase分布式數(shù)據(jù)庫(kù)中文本型數(shù)據(jù)的密文檢索,提出一種基于安全倒排索引的檢索策略。在構(gòu)建文本型密文索引時(shí),將HBase的常用于構(gòu)建二級(jí)索引的coprocessor框架與開源搜索引擎工具包Lucene進(jìn)行有機(jī)結(jié)合,將HBase中Column Family/Q ualifer限定的列規(guī)范為文本內(nèi)容之后進(jìn)行分詞加密,同時(shí)采用將Lucene中的相關(guān)文件等信息保存在HBase數(shù)據(jù)庫(kù)中來保證數(shù)據(jù)的完整性和可用性。這種方式可以很好地支持針對(duì)列的等值查詢與子串查詢。設(shè)計(jì)實(shí)現(xiàn)了基于HBase的密文檢索原型系統(tǒng),實(shí)現(xiàn)了用戶管理模塊、加解密模塊、密鑰管理模塊、密文索引生成與檢索模塊等,并對(duì)系統(tǒng)進(jìn)行了實(shí)驗(yàn)測(cè)試。HBase安全索引充分利用了現(xiàn)有HBase快速檢索能力,目前的研究成果對(duì)密文數(shù)據(jù)查詢多樣性的支持仍有一定的局限,該方向仍具有極大的研究空間與研究意義。
[Abstract]:With the arrival of big data era, the traditional relational database can not meet the needs of massive data processing in terms of access rate and so on. Therefore, NoSQL database emerges as the times require. Compared with relational database, NoSQL database has shortcomings in security. HBASE distributed database is a kind of NoSQL database with perfect security mechanism, but the data files in HBase database are stored in plain text. This forms a certain security loophole. It is very meaningful to encrypt the data files in HBase database and construct the secure secondary index of ciphertext for HBase database, which makes the HBase ciphertext database have the ability of conditional query. According to the different data types of column data in HBase distributed database, numerical ciphertext retrieval and text ciphertext retrieval can be studied respectively. For encrypted text retrieval of numerical data in HBase distributed database, a search strategy based on improved secure R-tree is proposed. When constructing the R-tree secure index for the data of the data table of HBase, the dynamic characteristics of the R-tree are used to store the RowKey row in the proper location of the index table according to the set encryption policy, according to the column value needed to build the index of the data table. At the same time, the index table IndexTable corresponding to the data table DataTable of HBase is stored in HBase to ensure the use and maintenance of the index table. This method can well support the column equivalent retrieval and range retrieval. A secure inverted index-based retrieval strategy for Chinese text-based data retrieval in HBase distributed database is proposed in this paper. When constructing text-based ciphertext index, we combine the coprocessor framework of HBase, which is commonly used in building secondary index, and Lucene, an open source search engine toolkit, to encrypt word segmentation after standardizing the Column Family/Q ualifer-qualified column in HBase as text content. At the same time, the data integrity and availability are ensured by storing the relevant files in the Lucene database in the HBase database. This method can well support the equivalent query and substring query for columns. The prototype system of ciphertext retrieval based on HBase is designed and implemented, which includes user management module, encryption and decryption module, key management module, ciphertext index generation and retrieval module, and so on. The security index of HBASE makes full use of the existing fast retrieval ability of HBase, and the current research results still have some limitations on the support of the diversity of ciphertext data query, and the security index of HBASE has made full use of the fast retrieval ability of the existing HBASE. This direction still has great research space and significance.
【學(xué)位授予單位】：華中科技大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2016
【分類號(hào)】：TP311.13;TP309

【參考文獻(xiàn)】

相關(guān)期刊論文 前10條

1 李文成;趙逢禹;;企業(yè)云存儲(chǔ)數(shù)據(jù)的加密與密文全文檢索研究[J];小型微型計(jì)算機(jī)系統(tǒng);2013年02期

2 曹夕;許力;陳蘭香;;云存儲(chǔ)系統(tǒng)中數(shù)據(jù)完整性驗(yàn)證協(xié)議[J];計(jì)算機(jī)應(yīng)用;2012年01期

3 鄒燕飛;于成尊;趙亮;;基于Lucene的文本搜索引擎的設(shè)計(jì)和實(shí)現(xiàn)[J];計(jì)算機(jī)與現(xiàn)代化;2011年09期

4 盧冬海;何先波;;淺析NoSQL數(shù)據(jù)庫(kù)[J];中國(guó)西部科技;2011年02期

5 鄭榕增;林世平;;基于Lucene的中文倒排索引技術(shù)的研究[J];計(jì)算機(jī)技術(shù)與發(fā)展;2010年03期

6 田秀彥;李忠;羅士美;鄧力強(qiáng);;基于Struts+Hibernate+Spring的整合架構(gòu)及其在Web開發(fā)中的應(yīng)用[J];計(jì)算機(jī)與現(xiàn)代化;2008年11期

7 王靜疆;;搜索引擎評(píng)價(jià)指標(biāo)體系比較研究[J];圖書情報(bào)工作;2008年10期

8 馮朝勝;秦志光;袁丁;;數(shù)據(jù)庫(kù)加密系統(tǒng)密鑰管理模塊的設(shè)計(jì)[J];電子科技大學(xué)學(xué)報(bào);2007年05期

9 胡立春;武友新;張燁;姜曉東;;LDAP環(huán)境下的統(tǒng)一用戶管理系統(tǒng)的研究與實(shí)現(xiàn)[J];計(jì)算機(jī)工程與設(shè)計(jì);2007年04期

10 管建和;甘劍峰;;基于Lucene全文檢索引擎的應(yīng)用研究與實(shí)現(xiàn)[J];計(jì)算機(jī)工程與設(shè)計(jì);2007年02期

相關(guān)碩士學(xué)位論文 前6條

1 付文靜;基于HBase的大數(shù)據(jù)存儲(chǔ)查詢技術(shù)研究[D];電子科技大學(xué);2015年

2 蔡平;基于Hadoop的NoSQL數(shù)據(jù)庫(kù)安全研究[D];上海交通大學(xué);2013年

3 關(guān)爾昱;基于數(shù)據(jù)庫(kù)外層加密的數(shù)據(jù)庫(kù)加密系統(tǒng)的設(shè)計(jì)與實(shí)現(xiàn)[D];北京郵電大學(xué);2010年

4 宋賽;密文全文檢索系統(tǒng)的安全索引結(jié)構(gòu)研究[D];華中科技大學(xué);2009年

5 劉可;數(shù)據(jù)庫(kù)加密系統(tǒng)研究[D];合肥工業(yè)大學(xué);2006年

6 余登峰;基于R樹的空間數(shù)據(jù)索引技術(shù)研究與實(shí)現(xiàn)[D];中國(guó)地質(zhì)大學(xué);2006年

，

本文編號(hào)：2440504