一种云存储中密文重删数据完整性审计方案研究

A Study on the Audit Scheme for the Integrity of Ciphertext Re-deleted Data in Cloud Storage

提出了一种基于代理重加密的密文重删数据完整性盲审计方法,设计了密文重删数据盲审计方案的框架并给出了相应的定义,该定义由7个算法组成。在同一框架下实现了客户端密文重复数据删除和云端数据完整性审计。利用代理重加密方法,实现了密文重删对所有者加密的密钥没有限制。设计新的标签生成方法,实现了标签重删,使得存储开销与所有者数量无关。同时,审计者可以代表任意数据所有者验证重删数据的完整性。详细的安全性分析表明,本研究的方案是可证明安全的,与现有的方案相比,在审计和重删等方面提高了效率。

This paper proposes a blind auditing method of ciphertext re-deleted data for integrity based on proxy reencryption, designs the framework of ciphertext re-deleted data blind auditing scheme and gives the corresponding definition, which consists of 7 algorithms. The ciphertext deduplication and cloud data integrity audit are implemented in the same framework. By using proxy re-encryption method, ciphertext re-deletion has no restriction on the encryption key of the owner. A new method of tag generation is designed to realize tag re-deletion, which makes the storage cost independent of the number of the owners. At the same time, the auditor can verify the integrity of the re-deleted data on behalf of any data owner. The detailed security analysis shows that the scheme of this project is provably safe and improves the efficiency of auditing and re-deleting compared with the existing scheme.