一个改进的远程数据完整性验证方案

An Improved Remote Data Integrity Verification Scheme

云存储已成为未来存储的一种发展趋势,远程数据完整性验证是保证云存储安全的一种关键技术。Zhuo等(ZHUO Hao,ZHONG S,YU N.A privacy-preserving remote data i-ntegrity checking protocol with data dynamics and public v-vrifiability.IEEE Transactions on Knowledge and Data Engineering,2011,23(9):1432)提出了一种支持数据动态更新、公开可验证和对验证者保密的远程数据完整性验证方案。通过分析发现,Zhuo等的方案存在无法防止用户不诚实、非法用户可冒充合法用户在云服务器中存储数据和已知证据伪造攻击等缺陷。为此,文章基于离散对数困难性问题提出一种改进的远程数据完整性验证的隐私保护方案。在该方案中通过增加一个Check Tag步骤来验证用户的诚实性。该方案既满足Zhuo等方案的特性,又克服了Zhuo等方案的缺陷。

Cloud storage has become a trend of future storage,and remote data integrity verification is a key technology of cloud storage. A remote data integrity verification scheme was proposed for data dynamic updating,public verifiability and privacy against verifiers. We analyzed the scheme and found that it is unable to prevent users dishonest,and the illegal users can pretend to be legal users store data in the cloud server and make known proofs forgery attacks etc. Therefore,in this paper we propose an improved remote data integrity verification scheme based on discrete logarithm difficulty problem. In the improved scheme by adding a Check Tag step to verify the integrity of users. And the improved scheme satisfy the characters of the old scheme,overcome the scheme＇s defects.