基于广义秘密共享方案的可生存存储系统研究

A Completely Practical Survivable Storage System Using Improved Generalized Secret-Sharing Scheme

高生存性是分布式存储系统设计所追求的重要目标之一。文中提出了一种改进的广义秘密共享方案,给出了它的形式化定义及实现方法;在此基础上设计了一个可生存存储系统模型,讨论了它的体系结构与工作流程;建立起了机密性与可用性评价体系,对该系统的机密性与可用性进行了详细评价。该系统针对实际应用中存储服务器所存在的逻辑分组与特权分级的情况,采用了广义秘密共享方案来实现信息的存储与重建,可以达到较高的机密性和可用性,具有较强的实用性,为构建高生存性存储系统提供了可能。

Aim. Shamir＇s secret-sharing scheme was developed by Ma et al and Liu et al into two different generalized secret-sharing schemes （GSSs）. The research done in Refs. 3, 4 and 5 needs, in our opinion, to be further improved so as to make it applicable to developing a survivable storage system （SSS） that is completely practical. Using the GSS of Ma et al can make the SSS practical only under a certain type of practical conditions. Similarly, using that of Liu et al can make the SSS practical only under another type of practical conditions. When both types exist, as is usually the case, both methods are no longer practical. In section 1 of the full paper, we give the formal definition of our improved GSS and the details of secret distribution and secret recovery. In section 2, we, on the basis of our improved GSS, design a novel model of the SSS and we give Table 1 in the full paper showing the detailed steps of workflow. In section 3, we evaluate the SSS using our improved GSS in terms of its confidentiality and availability by comparing it in detail with the traditional schemes in Refs. 3, 4 and 5, and we summarize the comparison results in Tables 2 and 3.