云计算环境下的双通道数据动态加密策略

doi:10.11772/j.issn.1001-9081.2020010113

计算机应用 ›› 2020, Vol. 40 ›› Issue (8): 2268-2273.DOI: 10.11772/j.issn.1001-9081.2020010113

云计算环境下的双通道数据动态加密策略

吕佳玉^1,2, 竺智荣^1,2, 姚志强^1,2

1. 福建师范大学数学与信息学院, 福州 350108;
2. 福建省公共服务大数据挖掘与应用工程技术研究中心(福建师范大学), 福州 350108

收稿日期:2020-02-10 修回日期:2020-04-10 出版日期:2020-08-10 发布日期:2020-04-16
通讯作者: 吕佳玉(1995-),女,辽宁盖州人,硕士研究生,主要研究方向:云安全与隐私;854633543@qq.com
作者简介:竺智荣(1992-),男,福建三明人,硕士研究生,主要研究方向:应用密码学;姚志强(1967-),男,福建莆田人,教授,博士,CCF高级会员,主要研究方向:信息安全。
基金资助:
国家自然科学基金资助项目（61872090，61972096）。

Two-channel dynamic data encryption strategy in cloud computing environment

LYU Jiayu^1,2, ZHU Zhirong^1,2, YAO Zhiqiang^1,2

1. College of Mathematics and Informatics, Fujian Normal University, Fuzhou Fujian 350108, China;
2. Fujian Engineering Research Center of Public Service Big Data Mining and Applications(Fujian Normal University), Fuzhou Fujian 350108, China

Received:2020-02-10 Revised:2020-04-10 Online:2020-08-10 Published:2020-04-16
Supported by:
This work is partially supported by the National Natural Science Foundation of China (61872090,61972096).

摘要/Abstract

摘要： 在移动端设备性能有限的情况下，针对数据传输效率与隐私保护之间的矛盾，提出基于贪心算法的双通道动态加密策略（TDES）对数据包进行选择性加密，旨在有限时间内最大化数据包隐私权重总和。首先，根据数据包的隐私权重将数据包大致分为两类；然后，针对不同类别数据包的隐私权重和加密时间分别计算权重排序表并降序排列，两类数据包对应两个传输通路，对隐私权重最大的数据包进行加密传输，直至传输时间结束；最后，检查通道内部剩余时间，调整部分数据包的传输通路，直至剩余时间不足以对任何数据包进行加密传输。在仿真数据包传输实验中，分别与D2ES和贪心算法进行比较，在相同时间限制下，所提策略的总隐私权重分别提高了9.5%和10.3%，运行时间分别降低了10.8%和8.5%。实验结果表明，TDES的计算时间更短，效率更高，能够很好地平衡数据安全和设备性能。

关键词: 隐私保护, 时间限制, 传输效率, 数据包隐私权重, 云计算

Abstract: In the case of limited mobile device performance, a Two-channel Dynamic Encryption Strategy (TDES) based on greedy algorithm was proposed to perform selective encryption to the data packet, so as to maximize the total privacy weight of packets in a limited time. First, the data packets were roughly classified into two categories according to the privacy weight of the data packets. Then, the weight ranking table was calculated by the privacy weight and the encryption time of the different data packets and sorted in descending order.The two types of data packets corresponded to two transmission channels, and the packet with the maximum privacy weight was encrypted for transmission until at the end of the transmission time. Finally, the remaining time inside the channel was checked, and the transmission channels of some packets were adjusted until the remaining time was less than the encryption time of any packet. The simulation of packet transmission tests shows that compared with Dynamic Data Encryption Strategy (D2ES) and greedy algorithm under the same time limit, the total privacy weight of the proposed strategy was increased by 9.5% and 10.3%, and the running time of the proposed strategy was reduced by 10.8% and 8.5%. Experimental results verify that the proposed TDES has shorter computation time and higher efficiency, which can well balance data security and equipment performance.

Key words: privacy protection, time constraint, transmission efficiency, packet privacy weight, cloud computing

中图分类号:

TP393.04

吕佳玉, 竺智荣, 姚志强. 云计算环境下的双通道数据动态加密策略[J]. 计算机应用, 2020, 40(8): 2268-2273.

LYU Jiayu, ZHU Zhirong, YAO Zhiqiang. Two-channel dynamic data encryption strategy in cloud computing environment[J]. Journal of Computer Applications, 2020, 40(8): 2268-2273.

参考文献

[1] QIU M, GAI K, THURAISINGHAM B, et al. Proactive user-centric secure data scheme using attribute-based semantic access controls for mobile clouds in financial industry[J]. Future Generation Computer Systems, 2018, 80:421-429.
[2] GAI K, LI S. Towards cloud computing:a literature review on cloud computing and its development trends[C]//Proceedings of the 4th International Conference on Multimedia Information Networking and Security. Piscataway:IEEE, 2012:142-146.
[3] GAI K, QIU M, CHEN L C, et al. Electronic health record error prevention approach using ontology in big data[C]//Proceedings of the 17th IEEE International Conference on High Performance Computing and Communications, IEEE 7th International Symposium on Cyberspace Safety and Security, IEEE 12th International Conference on Embedded Software and Systems. Piscataway:IEEE, 2015:752-757.
[4] YU S, ZHOU W, DOSS R, et al. Traceback of DDoS attacks using entropy variations[J]. IEEE Transactions on Parallel and Distributed Systems, 2011, 22(3):412-425.
[5] LI Y, DAI W, MING Z, et al. Privacy protection for preventing data over-collection in smart city[J]. IEEE Transactions on Computers, 2016, 65(5):1339-1350.
[6] 卢笛,马建峰,王一川,等.面向云计算环境的动态公平性度量方法[J].通信学报,2014,35(7):140-150. (LU D, MA J F, WANG Y C, et al. Dynamic fairness evaluation framework for cloud computing[J]. Journal on Communications, 2014, 35(7):140-150.)
[7] 马莉,唐善成,王静,等. 云计算环境下的动态反馈作业调度算法[J]. 西安交通大学学报, 2014, 48(7):77-82. (MA L, TANG S C, WANG J, et al. Dynamic feedback job scheduling algorithm in cloud computing[J]. Journal of Xi'an Jiaotong University, 2014, 48(7):77-82.)
[8] 倪志伟,李蓉蓉,方清华,等. 基于离散人工蜂群算法的云任务调度优化[J]. 计算机应用, 2016, 36(1):107-112, 121. (NI Z W, LI R R, FANG Q H, et al. Optimization of cloud task scheduling based on discrete artificial bee colony algorithm[J]. Journal of Computer Applications, 2016, 36(1):107-112, 121.)
[9] BLANTON M, ALIASGARI M. Secure outsourcing of DNA searching via finite automata[C]//Proceedings of the 2010 IFIP Annual Conference on Data and Applications Security and Privacy, LNCS 6166. Berlin:Springer, 2010:49-64.
[10] ATALLAH M J, KERSCHBAUM F, DU W. Secure and private sequence comparisons[C]//Proceedings of the 2003 ACM Workshop on Privacy in the Electronic Society. New York:ACM, 2003:39-44.
[11] ATALLAH M J, LI J. Secure outsourcing of sequence comparisons[J]. International Journal of Information Security, 2005, 4(4):277-287.
[12] VAN DIJK M, GENTRY C, HALEVI S, et al. Fully homomorphic encryption over the integers[C]//Proceedings of the 2010 International Conference on the Theory and Applications of Cryptographic Techniques, LNCS 6110. Berlin:Springer, 2010:24-43.
[13] DE CAPITANI DI VIMERCATI S, FORESTI S, JAJODIA S, et al. Over-encryption:management of access control evolution on outsourced data[C]//Proceedings of the 33rd International Conference on Very Large Data Bases.[S.l.]:VLDB Endowment, 2007:123-134.
[14] WENG L, AMSALEG L, MORTON A, et al. A privacy-preserving framework for large-scale content-based information retrieval[J]. IEEE Transactions on Information Forensics and Security, 2014, 10(1):152-167.
[15] YU S, ZHOU W, JIA W, et al. Discriminating DDoS attacks from flash crowds using flow correlation coefficient[J]. IEEE Transactions on Parallel and Distributed Systems, 2012, 23(6):1073-1080.
[16] LI Y, GAI K, QIU L, et al. Intelligent cryptography approach for secure distributed big data storage in cloud computing[J]. Information Sciences, 2016, 387:103-115.
[17] 蔡岳平,张文鹏,罗森. 基于最小接入保证带宽的数据中心网络带宽分配机制[J]. 计算机应用, 2017, 37(7):1825-1829. (CAI Y P, ZHANG W P, LUO S. Minimum access guaranteed bandwidth allocation mechanism in data center network[J]. Journal of Computer Applications, 2017, 37(7):1825-1829.)
[18] 徐珊珊. 工业控制系统轻量级数据安全传输的研究[D]. 杭州:浙江大学, 2016:38-62. (XU S S. Research on the safe transmission of lightweight data in industrial control system[D]. Hangzhou:Zhejiang University, 2016:38-62.)
[19] 刘建,鲜明,王会梅,等. 面向移动云的属性基密文访问控制优化方法[J]. 通信学报, 2018, 39(7):39-49. (LIU J, XIAN M, WANG H M, et al. Optimization method for attribute-based cryptographic access control in mobile cloud computing[J]. Journal on Communications, 2018, 39(7):39-49.)
[20] 蒋明达. 移动云环境下数据安全保护机制研究与实现[D]. 重庆:重庆邮电大学, 2017:24-38. (JIANG M D. Research and implementation of data security protection in mobile cloud environment[D]. Chongqing:Chongqing University of Posts and Telecommunications, 2017:24-38.)
[21] GAI K, STEENKAMP A. A feasibility study of platform-as-a-service using cloud computing for a global service organization[J]. Journal of Information Systems Applied Research, 2014, 7(3):28-42.
[22] LI K, ZHANG W, YANG C, et al. Security analysis on one-to-many order preserving encryption-based cloud data search[J]. IEEE Transactions on Information Forensics and Security, 2015, 10(9):1918-1926.
[23] CICCONETTI C, LENZINI L, LODI A, et al. Efficient two-dimensional data allocation in IEEE 802.16 OFDMA[J]. IEEE/ACM Transactions on Networking, 2014, 22(5):1645-1658.
[24] VIDYASAGAR M. A metric between probability distributions on finite sets of different cardinalities and applications to order reduction[J]. IEEE Transactions on Automatic Control, 2012, 57(10):2464-2477.
[25] GAI K, QIU M, ZHAO H, et al. Privacy-aware adaptive dataencryption strategy of big data in cloud computing[C]//Proceedings of the IEEE 3rd International Conference on Cyber Security and Cloud Computing. Piscataway:IEEE, 2016:273-278.

云计算环境下的双通道数据动态加密策略

Two-channel dynamic data encryption strategy in cloud computing environment

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

[1]	李卓, 宋子晖, 沈鑫, 陈昕. 边缘计算支持下的移动群智感知本地差分隐私保护机制[J]. 计算机应用, 2021, 41(9): 2678-2686.
[2]	陈家豪, 殷新春. 基于云雾计算的可追踪可撤销密文策略属性基加密方案[J]. 计算机应用, 2021, 41(6): 1611-1620.
[3]	葛丽娜, 胡雨谷, 张桂芬, 陈园园. 云计算环境基于客体属性匹配的逆向混合访问控制方案[J]. 计算机应用, 2021, 41(6): 1604-1610.
[4]	秦静, 安雯, 季长清, 汪祖民. 无线体域网隐私保护机制研究综述[J]. 计算机应用, 2021, 41(4): 970-975.
[5]	杨翎, 姜春茂. 基于三支决策的虚拟机节能迁移策略[J]. 计算机应用, 2021, 41(4): 990-998.
[6]	刘向宇, 夏国平, 夏秀峰, 宗传玉, 朱睿, 李佳佳. 个性化时空数据隐私保护[J]. 计算机应用, 2021, 41(3): 643-650.
[7]	张恩, 李会敏, 常键. 可验证的隐私保护k-means聚类方案[J]. 计算机应用, 2021, 41(2): 413-421.
[8]	陈锦宇, 刘兆伟. 基于改进投票证明共识协议的车联网系统[J]. 计算机应用, 2021, 41(1): 170-176.
[9]	马敏耀, 刘卓, 徐艺, 吴恋. 隐私保护整数区间位置关系判定问题[J]. 计算机应用, 2020, 40(9): 2657-2664.
[10]	马敏耀, 吴恋, 刘卓, 徐艺. 隐私保护整数点和区间关系判定问题[J]. 计算机应用, 2020, 40(7): 1983-1988.
[11]	龙洋洋, 陈玉玲, 辛阳, 豆慧. 基于联盟区块链的安全能源交易方案[J]. 计算机应用, 2020, 40(6): 1668-1673.
[12]	陈程军, 毛莺池, 王绎超. 基于激活-熵的分层迭代剪枝策略的CNN模型压缩[J]. 计算机应用, 2020, 40(5): 1260-1265.
[13]	杨洋, 王汝传. 增强现实中基于位置安全性的LBS位置隐私保护方法[J]. 计算机应用, 2020, 40(5): 1364-1368.
[14]	郭曙杰, 李志华, 蔺凯青. 云环境下基于模糊隶属度的虚拟机放置算法[J]. 计算机应用, 2020, 40(5): 1374-1381.
[15]	拜亚萌, 满君丰, 张宏. 基于区块链的电子健康记录安全存储模型[J]. 计算机应用, 2020, 40(4): 961-965.