【摘要】 针对云存储环境中密钥泄露、数据重复和完整性检验的问题,提出了一种支持密钥更新和密文数据去重的完整性审计方案。所提方案利用布隆过滤器实现了密态数据的客户端去重,且每一次密钥更新能保证更新结果不能由其余时间周期的密钥猜测得到。该方案首次解决了在支持密态数据去重的审计方案中密钥更新困难的问题。安全性分析表明,所提方案在随机预言机模型下基于计算性Diffie-Hellman困难问题假设具有强抗密钥泄露、机密性、可检测性以及认证标签和证明值的不可伪造性。更多还原

【Abstract】 For the problems of key-exposure, encrypted data duplication and integrity auditing in cloud data storage, a public auditing scheme was proposed to support key update and encrypted data deduplication. Utilizing Bloom filters, the proposed scheme could achieve client-side deduplication, and guaranteed that the key exposure in one time period didn’t effect the users’ private key in other time periods. The proposed scheme could solve the conflict between key-exposure resilient and encrypted data deduplication in public auditing scheme for the first time. Security analysis indicates that the proposed scheme is strong key-exposure resilient, confidentiality, detectability, and unforgeability of authentication tags and tokens under the computation Diffie-Hellman hardness assumption in the random oracle model.更多还原