面向资源受限用户的高效动态数据审计方案

doi:10.11772/j.issn.1001-9081.2020050614

计算机应用 ›› 2021, Vol. 41 ›› Issue (2): 422-432.DOI: 10.11772/j.issn.1001-9081.2020050614

所属专题：网络空间安全

面向资源受限用户的高效动态数据审计方案

李秀艳¹, 刘明曦², 史闻博³, 董国芳¹

1. 云南民族大学电气信息工程学院, 昆明 650500;
2. 东北大学计算机科学与工程学院, 沈阳 110819;
3. 东北大学秦皇岛分校计算机与通信工程学院, 河北秦皇岛 066004

收稿日期:2020-05-11 修回日期:2020-09-03 发布日期:2020-09-15 出版日期:2021-02-10
通讯作者: 董国芳
作者简介:李秀艳(1993-),女,云南昆明人,硕士研究生,CCF会员,主要研究方向:云数据安全、隐私保护;刘明曦(1996-),男,河北保定人,硕士研究生,主要研究方向:信息安全、云数据安全;史闻博(1980-),男,河北秦皇岛人,教授,博士,CCF会员,主要研究方向:安全协议、区块链;董国芳(1979-),女,云南德宏人,副教授,博士,CCF会员,主要研究方向:安全协议、物联网安全。
基金资助:
国家自然科学基金资助项目（61662089）。

Efficient dynamic data audit scheme for resource-constrained users

LI Xiuyan¹, LIU Mingxi², SHI Wenbo³, DONG Guofang¹

1. School of Electrical Information Engineering, Yunnan Minzu University, Kunming Yunnan 650500, China;
2. School of Computer Science and Engineering, Northeastern University, Shenyang Liaoning 110819, China;
3. School of Computer and Communication Engineering, Northeastern University at Qinhuangdao, Qinhuangdao Hebei 066004, China

Received:2020-05-11 Revised:2020-09-03 Online:2020-09-15 Published:2021-02-10
Supported by:
This work is partially supported by the National Natural Science Foundation of China (61662089).

摘要/Abstract

摘要： 物联网（IoT）设备推动着云存储外包数据服务的快速发展，从而使云存储外包数据服务得到越来越多终端用户的青睐，因此如何确保云服务器中用户数据的完整性验证成为一个亟待解决的热点问题。针对资源受限的用户，目前的云数据审计方案存在运算复杂、开销高和效率低等问题。为了解决这些问题，提出一个面向资源受限用户的高效动态数据审计方案。首先提出一个支持动态审计的NCBF-M-MHT数据结构，其中：新颖的计数布隆过滤器（NCBF）结构能在O（1）时间内实现数据的动态更新请求，从而保证审计的高效性；多棵Merkle哈希树（M-MHT）结构的根节点则通过用户身份验证进行签名，进而保证数据的安全性。然后对审计各实体采用不同的分配方式，并使用数据证据和标签证据来验证数据的正确性和完整性。实验结果表明，相比基于动态哈希表的审计方案（DHT Audit）、基于MHT的审计方案（MHT Audit）和基于位置数组双向链接信息表的审计方案（LA-DLIT Audit），所提出的方案在审计验证阶段的时间开销分别降低了45.40%、23.71%和13.85%，在动态更新阶段的时间开销分别降低了43.33%、27.50%和17.58%。

关键词: 物联网设备, 云存储外包, 资源受限用户, 动态数据审计, 数据完整性验证, 动态操作

Abstract: Internet of Things (IoT) devices promote the rapid development of cloud storage outsourcing data service, which is favored by more and more terminal users. Therefore, how to ensure the integrity verification of user data in cloud server has become a hot issue that needs to be solved urgently. For resource-constrained users, current cloud data audit scheme has the problems such as complex computation, high cost and low efficiency. To solve these problems, an efficient dynamic data audit scheme for resource-constrained users was proposed. First, a new data structure was proposed based on Novel Counting Bloom Filter (NCBF) and Multi-Merkle Hash Tree (M-MHT) to support dynamic audit, namely NCBF-M-MHT. In this data structure, the NCBF structure was able to realize the dynamic updating request of data within O(1) time, thereby ensuring the efficiency of audit. And the root node of M-MHT structure performed signing by user authentication to ensure the security of data. Then, different allocation methods were adopted for different audit entities, and the data evidence and label evidence were used to verify the correctness and integrity of data. Experimental results show that compared with the audit scheme based on Dynamic Hash Table (DHT), the audit scheme based on Merkle Hash Tree (MHT) and the audit scheme based on Location Array-Doubly Linked Info Table (LA-DLIT), the time cost of the proposed scheme in the audit verification phase is reduced by 45.40%, 23.71% and 13.85%, and the time cost in the dynamic update phase is reduced by 43.33%, 27.50% and 17.58% respectively.

Key words: Internet of Things (IoT) device, cloud storage outsourcing, resource-constrained user, dynamic data audit, data integrity verification, dynamic operation

中图分类号:

TP309.2

李秀艳, 刘明曦, 史闻博, 董国芳. 面向资源受限用户的高效动态数据审计方案[J]. 计算机应用, 2021, 41(2): 422-432.

LI Xiuyan, LIU Mingxi, SHI Wenbo, DONG Guofang. Efficient dynamic data audit scheme for resource-constrained users[J]. Journal of Computer Applications, 2021, 41(2): 422-432.

参考文献

[1] HUANG K,ZHANG X,MU Y,et al. EVA:efficient versatile auditing scheme for IoT-based datamarket in jointcloud[J]. IEEE Internet Things Journal,2020,7(2):882-892.
[2] 韩静, 李艳平, 禹勇, 等. 用户可动态撤销及数据可实时更新的云审计方案[J]. 软件学报,2020,31(2):578-596.(HAN J,LI Y P,YU Y,et al. Cloud auditing scheme with dynamic revocation of users and real-time updates of data[J]. Journal of Software, 2020,31(2):578-596.)
[3] LI F,SHI Y,SHINDE A,et al. Enhanced cyber-physical security in internet of things through energy auditing[J]. IEEE Internet Things Journal,2019,6(3):5224-5231.
[4] LIU M,WANG X,YANG C,et al. An efficient secure Internet of things data storage auditing protocol with adjustable parameter in cloud computing[J]. International Journal of Distributed Sensor Networks,2017,13(1):1-11.
[5] 黄领. 智能仪器仪表技术的运用及发展[J]. 化工设计通讯, 2019,45(10):77-79.(HUANG L. Application and development of intelligent instrumentation technology[J]. Chemical Engineering Design Communications,2019,45(10):77-79)
[6] 付安民, 秦宁元, 宋建业, 等. 云端多管理者群组共享数据中具有隐私保护的公开审计方案[J]. 计算机研究与发展,2015,52(10):2353-2362.(FU A M,QIN N Y,SONG J Y,et al. Privacypreserving public auditing for multiple managers shared data in the cloud[J]. Journal of Computer Research and Development,2015, 52(10):2353-2362.)
[7] 王雪, 张莉. 中国仪器仪表工程科技2035发展趋势研究[J]. 中国工程科学, 2017,19(1):111-115.(WANG X,ZHANG L. Development trends for China's instrumentation engineering science and technology to 2035[J]. Chinese Journal of Engineering Science,2017,19(1):111-115.)
[8] 金瑜, 蔡超, 何亨. 支持用户追溯和轻量的共享云数据审计方案[J]. 计算机应用,2017,37(12):3417-3422.(JIN Y,CAI C,HE H. Scheme of sharing cloud data audit supporting user traceability and lightweight[J]. Journal of Computer Applications,2017,37(12):3417-3422.)
[9] LIU M,FAN K,KUMAR N,et al. Hash-balanced binary treebased public auditing in vehicular edge computing and networks[J/OL]. International Journal of Communication Systems,2019(Early Access):No. e4134[2020-03-12]. https://onlinelibrary.wiley.com/doi/abs/10.1002/dac.4134.
[10] 邵必林, 李肖俊, 边根庆, 等. 云存储数据完整性审计技术研究综述[J]. 信息网络安全,2019,19(6):28-36.(SHAO B L,LI X J,BIAN G Q,et al. A survey on data integrity auditing technology in cloud storage[J]. Netinfo Security,2019,19(6):28-36.)
[11] 王惠峰, 李战怀, 张晓, 等. 云存储中支持失效文件快速查询的批量审计方法[J]. 计算机学报,2017,40(10):2338-2351. (WANG H F, LI Z H, ZHANG X, et al. Batch auditing supporting fast searching invalid files in cloud storage[J]. Chinese Journal of Computers,2017,40(10):2338-2351.)
[12] ZHAO J,XU C,CHEN K. Detailed analysis and improvement of an efficient and secure identity-based public auditing for dynamic outsourced data with proxy[J]. Journal of Information Security and Applications,2019,47:39-49.
[13] FAN K,LIU M,DONG G,et al. Enhancing cloud storage security against a new replay attack with an efficient public auditing scheme[J]. The Journal of Supercomputing,2020,76(7):4857-4883.
[14] BOTTA A,DE DONATO W,PERSICO V,et al. Integration of cloud computing and Internet of Things:a survey[J]. Future Generation Computer Systems,2016,56:684-700.
[15] DIÍAZ M,MARTÍN C,RUBIO B. State-of-the-art,challenges, and open issues in the integration of internet of things and cloud computing[J]. Journal of Network and Computer Applications, 2016,67:99-117.
[16] ATENIESE G,BURNS R,CURTMOLA R,et al. Provable data possession at untrusted stores[C]//Proceedings of the 14th ACM Conference on Computer and Communications Security. New York:ACM,2007:598-609.
[17] JUELS A,KALISKI B S. PORs:proofs of retrievability for large files[C]//Proceedings of the 14th ACM Conference on Computer and Communications Security. New York:ACM,2007:584-597.
[18] WANG C,REN K,LOU W,et al. Toward publicly auditable secure cloud data storage services[J]. IEEE Network,2010,24(4):19-24.
[19] WANG Q,WANG C,REN K,et al. Enabling public auditability and data dynamics for storage security in cloud computing[J]. IEEE Transactions on Parallel and Distributed Systems,2011,22(5):847-859.
[20] WANG C,CHOW S S M,WANG Q,et al. Privacy-preserving public auditing for secure cloud storage[J]. IEEE Transactions on Computers,2013,62(2):362-375.
[21] YANG K, JIA X. An efficient and secure dynamic auditing protocol for data storage in cloud computing[J]. IEEE Transactions on Parallel and Distributed Systems,2013,24(9):1717-1726.
[22] LI Y,YU Y,YANG B,et al. Privacy preserving cloud data auditing with efficient key update[J]. Future Generation Computer Systems,2016,78(Pt 2):789-798.
[23] ZHU Y,AHN G J,HU H,et al. Dynamic audit services for outsourced storages in clouds[J]. IEEE Transactions on Services Computing,2013,6(2):227-238.
[24] LIU C,CHEN J,YANG L T,et al. Authorized public auditing of dynamic big data storage on cloud with efficient verifiable finegrained updates[J]. IEEE Transactions on Parallel and Distributed Systems,2014,25(9):2234-2244.
[25] TIAN H,CHEN Y,CHANG C C,et al. Dynamic-hash-table based public auditing for secure cloud storage[J]. IEEE Transactions on Services Computing,2017,10(5):701-714.
[26] YU J,WANG H. Strong key-exposure resilient auditing for secure cloud storage[J]. IEEE Transactions on Information Forensics and Security,2017,12(8):1931-1940.
[27] SHEN J,SHEN J,CHEN X,et al. An efficient public auditing protocol with novel dynamic structure for cloud data[J]. IEEE Transactions on Information Forensics and Security,2017,12(10):2402-2415.
[28] LI J,ZHANG L,LIU J K,et al. Privacy-preserving public auditing protocol for low-performance end devices in cloud[J]. IEEE Transactions on Information Forensics and Security,2016, 11(11):2572-2583.
[29] WANG H,HE D,TANG S. Identity-based proxy-oriented data uploading and remote data integrity checking in public cloud[J]. IEEE Transactions on Information Forensics and Security,2016, 11(6):1165-1176.
[30] SHEN W, YU J, XIA H, et al. Light-weight and privacypreserving secure cloud auditing scheme for group users via the third party medium[J]. Journal of Network and Computer Applications,2017,82:56-64.
[31] ZHANG Y,XU C,LIANG X,et al. Efficient public verification of data integrity for cloud storage systems from indistinguishability obfuscation[J]. IEEE Transactions on Information Forensics and Security,2017,12(3):676-688.
[32] RABANINEJAD R,AHMADIAN ATTARI M,ASSAR M R,et al. Comments on a lightweight cloud auditing scheme:security analysis and improvement[J]. Journal of Network and Computer Applications,2019,139:49-56.
[33] YANG C, CHEN X, XIANG Y. Blockchain-based publicly verifiable data deletion scheme for cloud storage[J]. Journal of Network and Computer Applications,2018,103:185-193.
[34] BLOOM B H. Space/time trade-offs in hash coding with allowable errors[J]. Communications of the ACM,1970,13(7):422-426.
[35] BAI P, ZHANG W, WANG X, et al. Homomorphic authentication based on rank-based Merkle hash tree[C]//Proceedings of the 2018 International Conference on Emerging Internetworking, Data and Web Technologies, LNDECT 17. Cham:Springer,2018:841-848.
[36] FAN L,CAO P,ALMEIDA J,et al. Summary cache:a scalable wide-area Web cache sharing protocol[C]//Proceedings of the 1998 ACM SIGCOMM Conference on Applications,Technologies, Architectures,and Protocols for Computer Communication. New York:ACM,1998:254-265.

面向资源受限用户的高效动态数据审计方案

Efficient dynamic data audit scheme for resource-constrained users

PDF

可视化

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 1

编辑推荐

Metrics