Trust evaluation mechanism for distributed Hash table network nodes in cloud data secure self-destruction system

doi:10.11772/j.issn.1001-9081.2016.10.2715

Journal of Computer Applications ›› 2016, Vol. 36 ›› Issue (10): 2715-2722.DOI: 10.11772/j.issn.1001-9081.2016.10.2715

Previous Articles Next Articles

Trust evaluation mechanism for distributed Hash table network nodes in cloud data secure self-destruction system

WANG Dong^1,2, XIONG Jinbo^1,3, ZHANG Xiaoying¹

1. Faculty of Software, Fujian Normal University, Fuzhou Fujian 350117, China;
2. Faculty of Software, Xiamen University, Xiamen Fujian 361005, China;
3. Fujian Engineering Research Center of Public Service Big Data Mining and Application, Fuzhou Fujian 350117, China

Received:2016-04-08 Revised:2016-06-15 Online:2016-10-10 Published:2016-10-10
Supported by:
BackgroundThis work is partially supported by the National Natural Science Foundation of China (61402109, 61370078), the Natural Science Foundation of Fujian Province (2015J05120), the Distinguished Young Scientific Research Talents Plan in Universities of Fujian Province (2015).

面向云数据安全自毁的分布式哈希表网络节点信任评估机制

王栋^1,2, 熊金波^1,3, 张晓颖¹

1. 福建师范大学软件学院, 福州 350117;
2. 厦门大学软件学院, 福建厦门 361005;
3. 福建省公共服务大数据挖掘与应用工程技术研究中心, 福州 350117

通讯作者: 熊金波,E-mail:jinbo810@163.com
作者简介:王栋(1993—),男,福建福州人,硕士研究生,主要研究方向:信任评估、数据安全;熊金波(1981—),男,湖南益阳人,副教授,博士,CCF会员,主要研究方向:云数据安全、隐私保护;张晓颖(1995—),女,福建泉州人,主要研究方向:信任评估、数据安全。
基金资助:
国家自然科学基金资助项目（61402109，61370078）；福建省自然科学基金资助项目（2015J05120）；福建省高校杰出青年科研人才培育计划项目（2015）。

Abstract

Abstract: Distributed Hash Table (DHT) network is widely used in secure self-destruction schemes of privacy data in cloud computing environment, but malicious nodes and dishonest nodes in the DHT network easily lead to key shares loss or leakage. To tackle those problems, a trust evaluation mechanism was proposed for the DHT network used in cloud-data secure self-destruction system. In this mechanism, a trust cloud model was established for DHT nodes to describe their trust information qualitatively and quantitatively. By introducing an improved calculation method of direct trust value together with recommended trust value and fully considering the internal and external factors of DHT nodes, the trust value of nodes were first calculated on two dimensions consisted of operating experiment and interactive experience. The result data were used to build trust evaluation sub-cloud for each index. After that, all these trust evaluation sub-clouds were summed up to generate the comprehensive trust cloud according to the weights of different evaluation indexes. Then, the comprehensive trust cloud, by means of cloud generator algorithm, could be described as one-dimensional normal cloud. Finally, the reliable and efficient nodes could be selected using trust decision algorithm. Experimental results show that the proposed mechanism can help original data self-destruction system making comprehensive trust decision and finding reliable DHT network nodes, further enhancing disaster-tolerant capability and reducing computational cost of the system.

Key words: cloud data, data self-destruction, Distributed Hash Table (DHT), trust evaluation, trust cloud

摘要： 在云环境下的数据自毁机制中，针对分布式哈希表（DHT）网络的恶意节点和不诚信节点容易造成密钥分量丢失或泄露等问题，提出面向云数据安全自毁的DHT网络节点信任评估机制。该机制首先为节点建立二维信任评估模型，对节点可信程度进行定性和定量的考察；接着改进节点直接信任值和推荐信任值的计算方法，充分考虑节点内外因素，从节点运行环境和交互经验两个维度出发并细化到不同层级计算节点信任值，得到信任评价子云；然后将各个信任评价子云加权合成得到综合信任云，采用云发生器描绘出综合信任云一维高斯云图形；最后结合信任决策算法选出最优可信节点。实验结果表明该机制能够帮助原有的数据自毁机制找到更适合存储密钥分量的DHT网络节点，提高了系统的容灾能力并降低了系统计算负载。

关键词: 云数据, 数据自毁, 分布式哈希表, 信任评估, 信任云

CLC Number:

TP309.2

WANG Dong, XIONG Jinbo, ZHANG Xiaoying. Trust evaluation mechanism for distributed Hash table network nodes in cloud data secure self-destruction system[J]. Journal of Computer Applications, 2016, 36(10): 2715-2722.

王栋, 熊金波, 张晓颖. 面向云数据安全自毁的分布式哈希表网络节点信任评估机制[J]. 计算机应用, 2016, 36(10): 2715-2722.

References

[1] XIONG J B, LIU X M, YAO Z Q, et al. A secure data self-destructing scheme in cloud computing [J]. IEEE Transactions on Cloud Computing, 2014, 2(4): 448-458.
[2] XIONG J B, LI F H, MA J F, et al. A full lifecycle privacy protection scheme for sensitive data in cloud computing[J]. Peer-to-Peer Networking and Applications, 2015, 8(6): 1025-1037.
[3] PERLMAN R. File system design with assured delete[C]//Proceedings of the 3rd IEEE International Security in Storage Workshop. Piscataway, NJ: IEEE, 2005:83-88.
[4] YANG T, LEE P P, LUI J C, et al. FADE: secure overlay cloud storage with file assured deletion[C]//Proceedings of the 2010 International Conference on Security and Privacy in Communication Systems. Berlin: Springer, 2010: 380-397.
[5] NAIR S K, DASHTI M T, CRISPO B, et al. A hybrid PKI-IBC base ephemerizer system[C]//Proceedings of the 2007 International Information Security Conference. Berlin: Springer, 2007:241-252.
[6] GEAMBASU R, KOHNO T, LEVY A, et al. Vanish: increasing data privacy with self-destruction data[C]//Proceedings of the 18th USENIX Security Symposium. Berkeley: USENIX, 2009:299-355.
[7] XIONG J B, YAO Z Q, MA J F, et al. A secure document self-destruction scheme with identity based encryption [C]//Proceedings of the 2013 5th International Conference on Intelligent Networking and Collaborative Systems. Piscataway, NJ: IEEE, 2013: 239-243.
[8] XIONG J B, YAO Z Q, MA J F, et al. A secure document self-destruction scheme: an ABE approach [C]//Proceedings of the 2013 IEEE 10th International Conference on High Performance Computing and Communications & 2013 IEEE International Conference on Embedded and Ubiquitous Computing. Piscataway, NJ: IEEE, 2013: 59-64.
[9] ZENG L, SHI Z, XU S, et al. SafeVanish: an improved data self-destruction for protecting data privacy [C]//Proceedings of the IEEE Second International Conference on Cloud Computing Technology and Science. Piscataway, NJ: IEEE, 2010: 521-528.
[10] WOLCHOCK S, HOLFMANN O S, HENINGER N, et al. Defeating vanish with low-cost sybil attacks against large DHTs[C]//Proceedings of the 17th Annual Network & Distributed System Security Conference. San Diego: [s. n.], 2010:1-15.
[11] 熊金波, 姚志强, 马建峰, 等.面向网络内容隐私的基于身份加密的安全自毁方案[J]. 计算机学报, 2014, 37(1):140-150.(XIONG J B, YAO Z Q, MA J F, et al. A secure self-destruction scheme with IBE for the Internet content privacy [J]. Chinese Journal of Computers, 2014, 37(1):140-150.)
[12] 吴守才.云环境中基于信任评估的数据自销毁机制研究[D]. 沈阳:辽宁大学, 2015:1-60.(WU S C. Research on trust-based self-destructing scheme in cloud computing[D]. Shenyang: Liaoning University, 2015:1-60.)
[13] 杨莎.基于云理论的信任评估模型及应用研究[D]. 北京: 华北电力大学, 2011:1-53.(YANG S. Research on trust evaluation model and application based on cloud theory[D]. Beijing: North China Electric Power University, 2011:1-53.)
[14] LI T L, ZHOU X B. ZHT: a light-weight reliable persistent dynamic scalable zero-hop distributed Hash table[C]//Proceedings of IEEE 27th International Parallel Distributed Processing Symposium. Piscataway, NJ: IEEE, 2013:775-787.
[15] FALKER J, POATEK M, JOHN P, et al. Profiling a million user DHT[C]//Proceedings of the 7th ACM SIGCOMM Conference on Internet Measurement. New York: ACM, 2007:129-134.
[16] 翟学伟.信任的本质及其文化[J]. 社会, 2014, 34 (1):1-26.(ZHAI X W. The Essence of trust and its culture[J]. Chinese Journal of Sociology, 2014, 34(1):1-26.)
[17] 魏达, 贾翔鹏, 王健, 等.基于可信证书的可信网络接入模型及实现[J]. 吉林大学学报(工学版), 2010, 40(2):496-500.(WEI D, JIA X P, WANG J, et al. New access model and implementation of trusted network based on trusted certificate[J]. Journal of Jilin University (Engineering and Technology Edition), 2010, 40(2):496-500.)
[18] 张仕斌, 许春香.基于云模型的信任评估方法研究[J]. 计算机学报, 2013, 36(2):422-430.(ZHANG S B, XU C X. Study on the trust evaluation approach base on cloud model[J]. Chinese Journal of Computers, 2013, 36(2):422-430.)
[19] 路峰, 吴慧中.网格环境下基于云模型的信任评估和决策方法研究[J]. 系统仿真学报, 2009, 21(2):421-426.(LU F, WU H Z. Research of trust valuation and decision-making based on cloud model in grid environment[J]. Journal of System Simulation, 2009, 21(2):421-426.)
[20] 李德毅, 孟海军, 史雪梅.隶属云和隶属云发生器[J]. 计算机研究与发展, 1995, 32(6):15-20.(LI D Y, MENG H J, SHI X M. Membership clouds and membership cloud generators[J]. Journal of Computer Research and Development, 1995, 32(6):15-20.)
[21] 王亮, 郭亚军.P2P系统中基于声誉的信任评估机制[J]. 计算机工程与应用, 2009, 45(15):136-138.(WANG L, GUO Y J. Reputation-based on trust evaluation mechanism for P2P system[J]. Computer Engineering and Applications, 2009, 45(15):136-138.)
[22] 章夏彦, 张少敏.信任计算在大用户直购电交易中的研究与应用[D]. 北京:华北电力大学, 2010:1-55.(ZHANG X Y, ZHANG S M. Research and application of trust computing in direct power power purchase for large consumers[D]. Beijing: North China Electric Power University, 2010:1-55.)
[23] 沈薇薇, 姚志强, 熊金波, 等. 面向移动终端的隐私数据安全存储及自毁方案[J]. 计算机应用, 2015, 35(1):77-82.(SHEN W W, YAO Z Q, XIONG J B, et al. Secure storage and self-destruction scheme for privacy data in mobile devices [J]. Journal of Computer Applications, 2015, 35(1):77-82.)

Trust evaluation mechanism for distributed Hash table network nodes in cloud data secure self-destruction system

面向云数据安全自毁的分布式哈希表网络节点信任评估机制

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics

[1]	LI Weiqiang, LEI Hang, ZHANG Jingyu, WANG Xupeng. 3D hand pose estimation based on label distribution learning [J]. Journal of Computer Applications, 2021, 41(2): 550-555.
[2]	CAI Hao, YUAN Zhengdao. Greedy algorithm optimization based virtual machine selection strategy in cloud data center [J]. Journal of Computer Applications, 2020, 40(6): 1707-1713.
[3]	XIAO Shihua, SANG Nan, WANG Xupeng. 3D point cloud head pose estimation based on deep learning [J]. Journal of Computer Applications, 2020, 40(4): 996-1001.
[4]	XIE Lixia, WEI Ruixin. Dynamic trust evaluation method for IoT nodes [J]. Journal of Computer Applications, 2019, 39(9): 2597-2603.
[5]	LIU Kainan. Greedy algorithm-based virtual machine migration strategies in cloud data center [J]. Journal of Computer Applications, 2019, 39(11): 3333-3338.
[6]	JIANG Bingcheng, HE Qian, CHEN Yiting, LIU Peng. Cloud database oriented attribute based encryption and query translation middleware [J]. Journal of Computer Applications, 2018, 38(8): 2280-2286.
[7]	ZHANG Guanghua, YANG Yaohong, PANG Shaobo, CHEN Zhenguo. Adaptive security mechanism for defending On-off attack based on trust in Internet of things [J]. Journal of Computer Applications, 2018, 38(3): 682-687.
[8]	MIAO Junmin, FENG Chaosheng, LI Min, LIU Xia. Public auditing scheme of data integrity for public cloud [J]. Journal of Computer Applications, 2018, 38(10): 2892-2898.
[9]	ZHAO Erping, LIU Wei, DANG Hong'en. Data compression and spatial indexing technology for massive 3D point cloud [J]. Journal of Computer Applications, 2018, 38(1): 146-151.
[10]	WANG Minshen, XIONG Jinbo, LIN Qian, WANG Lili. Cloud data assured deletion scheme based on key distribution and ciphertext sampling [J]. Journal of Computer Applications, 2018, 38(1): 194-200.
[11]	XIE Hong'an, LI Dong, SU Yang, YANG Kai. Trusted network management model based on clustering analysis [J]. Journal of Computer Applications, 2016, 36(9): 2447-2451.
[12]	MA Manfu, ZHANG Zhengfeng. Network trust evaluation based on extension cloud [J]. Journal of Computer Applications, 2016, 36(6): 1533-1537.
[13]	CHEN Zhenguo, TIAN Liqin. Application of trust model in evaluation of haze perception source [J]. Journal of Computer Applications, 2016, 36(2): 472-477.
[14]	WEI Bo WANG Jindong ZHANG Hengwei YU Dingkun. Service trust evaluation method based on weighted multiple attribute cloud [J]. Journal of Computer Applications, 2014, 34(3): 678-682.
[15]	HAN Zhigeng CHEN Geng JIANG Jian WANG Liangmin. Timelag weakening strategy for enhancing reliability of trust evaluation [J]. Journal of Computer Applications, 2014, 34(1): 82-85.