【摘要】：隨著計算機技術(shù)和應(yīng)用地不斷發(fā)展,企業(yè)級用戶的數(shù)據(jù)量呈指數(shù)級增長,用于數(shù)據(jù)存儲以及數(shù)據(jù)維護的成本急劇增加,這在一定程度上消耗了企業(yè)的精力。他們不得不為了擴展存儲容量而購買更多的硬件設(shè)備,甚至需要為此來雇傭?qū)I(yè)人員管理和維護這些數(shù)據(jù),這在一定程度上限制了原有業(yè)務(wù)的發(fā)展。由此,基于DAS模型的云存儲業(yè)務(wù)應(yīng)運而生。在該模型下,用戶將數(shù)據(jù)交由第三方的數(shù)據(jù)庫服務(wù)提供商保存和管理。然而,新的存儲模型也帶來了新的問題,由于數(shù)據(jù)的存儲與訪問都要依賴于數(shù)據(jù)庫服務(wù)提供商,企業(yè)很容易受到來自數(shù)據(jù)庫服務(wù)提供商內(nèi)部人員的攻擊。若不對數(shù)據(jù)進行處理,他們可以輕易獲取數(shù)據(jù)。為此,需要將數(shù)據(jù)進行加密處理后再交由DBSP進行存儲和管理。但是加密后的數(shù)據(jù)失去了原有的相似性、有序性和可比性,致使檢索性能大幅度下降。因此如何在保證數(shù)據(jù)安全性的前提下,提高數(shù)據(jù)密文檢索性能是一個亟需解決的問題。本文的主要研究工作如下:1、針對數(shù)值型數(shù)據(jù),在加密方面,提出了一種基于IDEA的改進加密策略:即通過隨機數(shù)字生成函數(shù)生成指定范圍的隨機擾亂數(shù)字,將其與經(jīng)過倍數(shù)擴大后的原始明文進行加法操作,以使相同的數(shù)值明文經(jīng)過加密后生成不同的密文。在密文檢索方面,提出了一種改進的檢索方案;在這種檢索方案中,用戶端首先通過安全哈希算法SHA-256,對本地持有的密鑰進行運算,得到指定長度的數(shù)值分布參考序列;然后將原始明文數(shù)據(jù)按照該序列的分布規(guī)律進行編號映射,并將映射結(jié)果存入用戶端的數(shù)據(jù)庫表中以備后期查詢;在此基礎(chǔ)上,提出了一種基于折半查找的數(shù)值逼近策略的范圍檢索方案;與原方案相比,該方案借用折半查找的核心思想,有效提高了檢索性能。2、針對字符型數(shù)據(jù),在加密方面,提出了一種基于IDEA的改進加密策略:即利用隨機字符序列生成函數(shù)生成固定長度的隨機擾亂字符,將其作為首部加在敏感字符數(shù)據(jù)前。通過實驗,這種加密策略相對于以往的加密策略在保證安全性的基礎(chǔ)上大大提高了加/解密速度。在密文檢索方面,提出了一種改進的桶劃分策略,該策略將字符數(shù)值化,并在字符劃分入桶之前即對桶號進行隨機擾亂操作,同時通過隨機分配函數(shù)指定隨機數(shù)目的字符劃分入桶,將字符轉(zhuǎn)換為所在桶號,實現(xiàn)了字符數(shù)據(jù)的信息隱藏。最后,提出了一種將基于BloomFilter的改進字符集特征索引生成策略和基于對偶編碼函數(shù)映射的改進字符位置關(guān)系特征索引生成策略相結(jié)合的索引生成策略。通過實驗,這種雙重檢索策略較以往的檢索策略性能有所提高。3、基于DAS模型環(huán)境下,應(yīng)用阿里云作為第三方DBSP對敏感數(shù)據(jù)進行托管存儲。并應(yīng)用Java語言,對基于DAS模型的云存儲環(huán)境下的字符型數(shù)據(jù)加密和密文檢索方案進行了實現(xiàn)。并針對加/解密模塊、字符信息隱藏子模塊、字符集特征索引生成模塊、字符位置關(guān)系索引生成模塊以及密文檢索模塊等核心模塊進行了代碼實現(xiàn)地詳細說明。并通過實驗對本文提出的加密及密文檢索方案進行了驗證,證明了其在保證安全性的同時仍具有較高的檢索性能。
[Abstract]:With the development of computer technology and application, the data volume of enterprise-class users has increased exponentially, and the cost of data storage and data maintenance has increased dramatically, which has consumed the energy of the enterprise to some extent. They had to buy more hardware devices to expand their storage capacity, and even needed to hire professionals to manage and maintain the data, which, to some extent, limited the development of the original business. Therefore, the cloud storage service based on the DAS model comes into being. In this model, the user places the data to a third-party database service provider for storage and management. However, the new storage model also brings new problems, because the storage and access of the data depends on the database service provider, and the enterprise is vulnerable to the attack from the internal personnel of the database service provider. If the data is not processed, they can easily get the data. To this end, the data needs to be encrypted and then be stored and managed by the DBSP. But the encrypted data has lost the original similarity, the order and the comparability, so that the retrieval performance is greatly reduced. Therefore, it is an urgent problem to improve the retrieval performance of the data cipher text under the premise of ensuring the data security. The main research work of this paper is as follows:1. In the aspect of encryption, an improved encryption strategy based on IDEA is proposed: that is, a random disturbance number of a specified range is generated by a random number generation function, And performing an addition operation on the original plaintext after the multiple expansion so as to generate different cipher text after the same numerical text is encrypted. In the search of the cipher text, an improved retrieval scheme is proposed; in this retrieval scheme, the user end first calculates the locally-held key by the secure hash algorithm SHA-256 to obtain a numerical distribution reference sequence of the specified length; then, the original plain text data is numbered and mapped according to the distribution rule of the sequence, and the mapping result is stored in the database table of the user terminal for later inquiry; on the basis, a range retrieval scheme of a numerical approximation strategy based on the semi-search is proposed; and compared with the original scheme, this scheme uses the core idea of the semi-lookup to effectively improve the retrieval performance. In the aspect of encryption, an improved encryption strategy based on IDEA is proposed, namely, the random character sequence generation function is used to generate the random disturbance character of the fixed length, It is applied as a header to the sensitive character data. Experiments show that the encryption strategy greatly improves the encryption/ decryption speed on the basis of ensuring the security with respect to the previous encryption strategy. in the aspect of cipher text retrieval, an improved bucket division strategy is proposed, And the information hiding of the character data is realized. Finally, an index generation strategy combining an improved character set feature index generation strategy based on a binary filter and an improved character position relation feature index generation strategy based on a dual coding function mapping is proposed. Based on the DAS model, the application of Alibaba Cloud as the third-party DBSP for the managed storage of sensitive data. And a Java language is applied to implement the character-type data encryption and the cipher text retrieval scheme under the cloud storage environment based on the DAS model. And the core modules such as the encryption/ decryption module, the character information hiding sub-module, the character set characteristic index generation module, the character position relation index generation module and the cipher text retrieval module are described in detail. The encryption and cipher text retrieval scheme proposed in this paper is verified by the experiment, and it is proved that it still has higher retrieval performance while ensuring the security.
【學(xué)位授予單位】：北京郵電大學(xué)
【學(xué)位級別】：碩士
【學(xué)位授予年份】：2016
【分類號】：TP333;TP309.7

【相似文獻】

相關(guān)期刊論文 前8條

1 ;DAS音箱制造廠[J];音響技術(shù);2006年10期

2 劉芳;;DAS在寶鋼電廠的應(yīng)用[J];上海電力;2003年02期

3 黃海濤;DAS開關(guān)自動化模式的應(yīng)用實踐[J];福建電力與電工;2002年01期

4 陳志揚,鄭青山,孫瑞元;大型藥理學(xué)計算軟件DAS的功能介紹[J];中國臨床藥理學(xué)與治療學(xué);2002年06期

5 ;DAS音箱2006年最新系列[J];音響技術(shù);2006年10期

6 趙丹楓;金順福;劉國華;高峰;王檸;;DAS模型下基于查詢概率的密文索引技術(shù)[J];燕山大學(xué)學(xué)報;2008年06期

7 吳行章;張德順;;實用的DAS本地計算機網(wǎng)絡(luò)概述[J];計算機應(yīng)用研究;1984年04期

8 廖惠如;;牛津半導(dǎo)體主攻消費性DAS與NAS市場[J];電子與電腦;2009年01期

相關(guān)會議論文 前3條

1 彭若谷;祁偉;;DAS汽封在600MW汽輪機組的應(yīng)用[A];全國火電600MWe級機組能效對標(biāo)及競賽第十四屆年會論文集[C];2010年

2 馬莎;楊波;;基于DAS模型的一種密文數(shù)據(jù)庫查詢優(yōu)化方法[A];第二十五屆中國數(shù)據(jù)庫學(xué)術(shù)會議論文集（一）[C];2008年

3 李國華;昝紅英;;一種表征字符信息量的法則:Character's Law[A];中國計算語言學(xué)研究前沿進展（2009-2011）[C];2011年

相關(guān)重要報紙文章 前2條

1 ;惠普 MSA1000從DAS向SAN的全面移植[N];中國計算機報;2002年

2 郭濤;聯(lián)想力推SureSCSI 310 滿足八成用戶的DAS需求[N];中國計算機報;2003年

相關(guān)博士學(xué)位論文 前3條

1 蔣們;云存儲密文檢索的關(guān)鍵字隱私性研究[D];北京郵電大學(xué);2017年

2 胡先君;密文域圖像去噪方法研究[D];中國科學(xué)技術(shù)大學(xué);2017年

3 劉念;DAS模型中的數(shù)據(jù)庫加密與密文檢索研究[D];北京郵電大學(xué);2010年

相關(guān)碩士學(xué)位論文 前10條

1 王靜;基于DAS模型的云存儲加密與密文檢索方案的研究與實現(xiàn)[D];北京郵電大學(xué);2016年

2 束曉偉;云計算中基于索引的密文并行查詢實現(xiàn)與優(yōu)化[D];南京郵電大學(xué);2017年

3 那海洋;云計算環(huán)境下面向密文檢索的索引構(gòu)建與優(yōu)化[D];南京郵電大學(xué);2017年

4 儲轉(zhuǎn)轉(zhuǎn);屬性撤銷的密文策略屬性基加密及其應(yīng)用研究[D];南京郵電大學(xué);2017年

5 張成果;CryptDB密文數(shù)據(jù)庫系統(tǒng)研究[D];南京郵電大學(xué);2017年

6 楊華山;云環(huán)境中基于CP-ABE密文檢索的研究[D];南京郵電大學(xué);2017年

7 徐九齡;基于點對點的短信加密系統(tǒng)的設(shè)計與實現(xiàn)[D];東華大學(xué);2017年

8 耿霞;支持密文搜索和運算的遙感圖像加密研究[D];上海海洋大學(xué);2017年

9 黃瀟;云存儲環(huán)境下群組代理重加密的研究與應(yīng)用[D];電子科技大學(xué);2017年

10 汪海偉;云計算環(huán)境下可搜索加密數(shù)據(jù)庫系統(tǒng)的設(shè)計與實現(xiàn)[D];南京郵電大學(xué);2017年

，

本文編號：2449342