移动云计算环境中基于代理的可验证数据存储方案

Agent-based provable data possession scheme for mobile cloud computing

现有云计算可验证数据存储协议无法直接应用于终端存储和计算能力有限的移动计算环境。针对该问题,提出移动计算环境下基于代理的可验证云存储协议,在终端和云服务器之间引入一个半可信的安全计算代理,利用代理来帮助移动终端用户完成计算密集的操作,从而使得可验证数据存储方案可用于移动计算环境。提出一个具体的可验证数据存储协议,形式化证明了所提协议满足随机预言机模型下的选择明文攻击(CPA)安全,量化分析结果表明协议设计适用于移动计算环境,符合设计目标。

The existing Provable Data Possession （PDP） schemes cannot be directly applied in mobile cloud computing because the terminal＇ storage space and computing power are limited for the computationally intensive operations in those schemes. Addressing this issue, an Agent-based PDP scheme was proposed for mobile cloud computing. A semi-trusted security computation Agent was introduced between the terminal and the cloud server in order to help end-~users complete the computationally intensive operations, so that the PDP scheme can be applied in mobile computing. A concrete PDP scheme was presented and a formal proof shows it satisfies the Chosen Plaintext Attack （CPA） security under random oracle model. The quantitative analysis results show that the scheme is fit for mobile cloud computing.