基于可信第三方的多提供商安全云存储系统设计

The Design of a Security Cloud Storage System Based on the Trusted Third Party Providers

云存储作为一种服务日益普及,但消费者无法根据量化指标(如存储安全系数、数据分块存储的云服务器数量等)来订制自己的云存储服务,也无法保证云存储提供商对隐私数据的保护,为隐私数据的泄漏带来隐患。为解决这些问题,提出了基于可信第三方的云存储架构方案,将用户数据信息与用户身份信息隔离存储,并通过注册制审核云存储提供商的资格,实现将对云存储提供商的服务质量评估交由可信第三方,并利用可信第三方的质量评估体系对云存储提供商进行评估;同时用户可根据数据的安全性高低选择不同等级的云存储服务,真正实现"按需服务"。经过安全性分析与实验,结果表明,所提出的方案对性能损耗可以接受,而且安全性得到显著提高,具有一定的应用价值。

Cloud storage is becoming more and more popular as a service,while consumers cannot choose a cloud storage provider via quantitative indicators,and there is no guarantee that cloud storage providers would protect the privacy of data,which brings privacy data leakage risk.In order to solve these problems,put forward a cloud storage architecture scheme based on trusted third party,which separates user data information from user identity information,and audits the cloud storage providers through qualification registration system,so that the trusted third party could evaluate the service quality of cloud storage providers and users can choose different grades of cloud storage services based on the security of the data as＂on-demand service＂.Through safety analysis and experiment,the results show that the proposed scheme is acceptable to the performance loss while the security is improved,so it is valuable in practice.