【作者】 李彬；

【导师】 胡正名；

【作者基本信息】 北京邮电大学 ， 信息安全， 2015， 硕士

【摘要】 云存储的大容量、低消费、可伸缩性及灵活性特点不断吸引着大众,显然企业和用户已经把大量的数据和事物迁移到了云存储。雇主在受益的同时也不得不考虑不同于本地存储的安全隐患,其中有一部分安全隐患是由服务提供商是否可信引发的。如果数据存储在云端的服务器上,用户并不能使用本地和传统的方法验证数据的完整性。用户向云端发送删除数据的指令后,服务提供商有可能没有删除用户的数据。用户每次更新数据,服务端也有可能直接存储新数据而不是用新数据去覆盖旧数据。本文重点研究用户在云端数据的完整性保护技术和基于密码学保护的云端数据删除问题。本文的具体工作如下所示：1.研究了相关方案和技术后,提出了一种新的完整性验证方案,详细阐述了方案的框架及细节,方案中拥有可信第三方的参与,且支持数据块级别的更新操作。分析了方案的各项性能。2.研究了数据删除技术,并对提出的完整性验证方案进行改进使之支持数据块级的删除操作。提出了基于权限的删除方案,对方案进行了详细的介绍,最后对方案进行了安全分析。3.设计了模拟系统,系统基于提出的改进的云端数据完整性验证方案及对云端数据删除的研究。系统能够很好的确保云端数据的完整性及用户删除数据的隐私性。更多还原

【Abstract】 Cloud storage brought cheap, flexibility, scalability and big capacity to the public. Obviously a large number of data has been migrated to the cloud storage by most of Enterprises and users. Despite the benefits of cloud storage, there are still substantial security issues which do not exist for local storage. Some of these issues arise because customers may be unwilling or unable to trust cloud providers.If the data is stored in the remote server, the user can’t use local and traditional way verify the integrity of the data. When the user send a deletion commands to the cloud, the providers may not delete the data indeed. Even the user update the data every time, the providers may not cover the old data. This project will focus on the issue of ensuring the integrality of data and the issue of cryptographic deletion of data. The main work is as follows:1. After we studied the relevant programs and techniques, we presents a data integrity verification mechanism for the cloud. Our mechanism has a particular part hand in and support the operation of data block update. Then we analyzes the scheme of the performance.2. We studied the data deletion technology, and improve our verification mechanism to support data deletion. We also have studied multiple cryptographic schemes about data deletion. We proposed the deletion scheme based on authority and introduced in detail, finally analysis the scheme of safety.3. Finally we design a system which based of our data integrity verification mechanism and the study of the data deletion. The system can ensure the data integrity and protect the privacy about user data deletion.更多还原