计算机应用 ›› 2015, Vol. 35 ›› Issue (1): 77-82.DOI: 10.11772/j.issn.1001-9081.2015.01.0077

• 信息安全 • 上一篇    下一篇

面向移动终端的隐私数据安全存储及自毁方案

沈薇薇1, 姚志强1, 熊金波1, 刘西蒙2   

  1. 1. 福建师范大学 软件学院, 福州350108;
    2. 南洋理工大学 电气与电子工程学院, 新加坡 南洋639798
  • 收稿日期:2014-07-23 修回日期:2014-09-11 出版日期:2015-01-01 发布日期:2015-01-26
  • 通讯作者: 熊金波
  • 作者简介:沈薇薇(1991-),女,福建漳州人,硕士研究生,主要研究方向:移动数据安全、网络信息系统与安全;姚志强(1967-),男,福建莆田人,教授,博士,CCF高级会员,主要研究方向:信息安全;熊金波(1981-),男,湖南益阳人,讲师,博士,CCF会员,主要研究方向:移动数据安全、云数据安全与隐私保护;刘西蒙(1988-),男,陕西西安人,博士研究生,主要研究方向:大数据安全、隐私保护.
  • 基金资助:

    国家自然科学基金资助项目(61370078, 61402109);福建省教育厅基金资助项目(JB14034, JB12021).

Secure storage and self-destruction scheme for privacy data in mobile devices

SHEN Weiwei1, YAO Zhiqiang1, XIONG Jinbo1, LIU Ximeng2   

  1. 1. Faculty of Software, Fujian Normal University, Fuzhou Fujian 350108, China;
    2. School of Electrical and Electronic Engineering, Nanyang Technological University, Nanyang 639798, Singapore
  • Received:2014-07-23 Revised:2014-09-11 Online:2015-01-01 Published:2015-01-26

摘要:

针对移动终端隐私数据的安全问题,结合数据压缩、门限秘密共享和移动社交网络,提出一种面向移动终端的隐私数据安全存储及自毁方案.首先,对移动隐私数据进行无损压缩获得压缩数据.然后,使用对称密钥对压缩数据进行对称加密获得原始密文.接着,将原始密文分解成两部分密文块:其中一部分密文块与时间属性结合并封装成移动数据自毁对象(MDSO)后保存到云服务器中;另一部分密文块与对称密钥和时间属性结合,再经过拉格朗日多项式处理后获得密文分量.最后,将这些密文分量分别嵌入图片并共享到移动社交网络.当超过授权期后,任何用户都无法获取密文块重组出原始密文,从而无法恢复隐私数据,最终实现移动隐私数据的安全自毁.实验结果表明:当文件为10 KB时,压缩和加密时间之和仅为22 ms,说明所提方案性能开销较低.综合分析亦表明该方案具备较高安全性,能有效抵抗安全攻击,保护移动隐私数据的隐私安全.

关键词: 移动终端, 安全自毁, 隐私保护, 文件压缩, 移动社交网络

Abstract:

To protect the privacy data stored in mobile devices, a secure storage and self-destruction scheme for mobile devices was proposed, which was based on data compression, threshold secret sharing and mobile social networks. In this security scheme, the private data was first compressed with a lossless compression technique, and then the compressed data was encrypted symmetrically by a symmetric key to obtain primitive ciphertext, which was divided into two parts of ciphertext. With time attribute, one part of ciphertext was encapsulated into the Mobile Data Self-destructing Object (MDSO), which was stored in cloud servers. Furthermore, with the symmetric key and time attribute, the other part of ciphertext was processed by the Lagrange polynomial, and the mixture ciphertext shares were generated. At last, these mixture ciphertext shares were embedded into the pictures sharing to social networks. When the authorization was expired, no one could obtain ciphertext block to recombine the original ciphertext, so the security of the privacy data could be protected. The experimental results show that, the sum of the compression and encryption time is only 22 ms when the size of file is 10 KB, which explains the proposed scheme has low performance overhead; furthermore, the results of the comprehensive analysis indicate that the proposed scheme has high security, and it can resist against attacks effectively and protect the mobile privacy data.

Key words: mobile device, self-destruction, privacy protection, file compression, mobile social network

中图分类号: