基于无证书的多服务器高效数据审计方案OA
A certificateless multi-server efficient data auditing scheme
在传统的云存储审计方案中,云服务器中的数据完整性验证一般由数据拥有者审计.然而,在实际应用中数据使用者为确保所获取数据的完整性和正确性也需要实施审计,为此,提出一种基于无证书的多服务器高效数据审计方案.在密钥生成阶段,使用无证书密码技术,用户公私钥由密钥生成中心和用户共同生成,从而有效避免密钥托管问题;在数据上传阶段,数据拥有者对原始文件按照一定比特大小进行分块,利用伪随机函数对每个数据块盲化,便于抽取部分数据块进行审计并保护原始数据的隐私信息不被泄露;在审计阶段,由第三方审计者代替用户向云服务器发起挑战,云服务器根据挑战信息计算证据并返回给第三方审计者,当多服务器返回的证据与第三方审计者所持有的信息一致时,表明被数据使用者审计的数据具备完整性和正确性.安全性分析表明,所提方案能够有效抵抗敌手的伪造攻击;性能分析表明,较同类型方案,所提方案时间开销减少了约30%.
In traditional cloud storage auditing schemes,data integrity verification on cloud servers is typically performed and audited by data owners.However,in practical applications,data users(DU)al-so need to conduct audits to ensure the integrity and correctness of the data they obtain.To this end,a certificateless multi-server efficient data auditing scheme is proposed.In the key generation phase,cer-tificateless cryptography is employed,where user public and private keys are jointly generated by the key generation center(KGC)and the user,effectively avoiding the key escrow problem.In the data up-load phase,the data owner divides the original file into blocks of a certain bit size and blinds each data block using a pseudorandom function(PRF),facilitating the extraction of partial data blocks for auditing while protecting the privacy of the original data from being disclosed.In the audit phase,a third-party auditor(TPA)issues challenges to the cloud servers on behalf of the user.The cloud servers compute proofs based on the challenge information and return them to the third-party auditor.When the proofs returned by the multiple servers are consistent with the information held by the third-party auditor,it indicates that the data audited by the data user possesses integrity and correctness.Security analysis demonstrates that the proposed scheme can effectively resist adversaries'forgery attacks.Performance analysis shows that,compared with existing certificateless auditing schemes,the proposed scheme re-duces time overhead by approximately 30%.
冯珍;曹素珍;刘晨旭;刘静洁;庞新杰
西北师范大学人工智能与计算机学院(软件学院),甘肃 兰州 730070西北师范大学人工智能与计算机学院(软件学院),甘肃 兰州 730070||西北师范大学密码学与数据分析重点实验室,甘肃 兰州 730070西北师范大学人工智能与计算机学院(软件学院),甘肃 兰州 730070西北师范大学人工智能与计算机学院(软件学院),甘肃 兰州 730070西北师范大学人工智能与计算机学院(软件学院),甘肃 兰州 730070
信息技术与安全科学
无证书数据审计第三方审计多服务器不可伪造性
certificatelessdata auditingthird-party auditormulti-serverunforgeability
《计算机工程与科学》 2026 (8)
1388-1397,10
国家自然科学基金(62262060,62362059)甘肃省教育厅产业支撑计划(2022CYZC-17,2023CYZC-09)甘肃省重点研发计划(23YFGA0081)
评论