基于层次树的动态群组隐私保护公开审计方案

Privacy-Preserving Public Auditing for Dynamic Group Based on Hierarchical Tree

随着云存储的高速发展,保证共享数据的安全变得尤为重要.因此,在共享数据的同时,需要对数据完整性进行有效验证并对用户隐私进行保护.针对现有支持动态群的公开审计方案没有考虑密钥管理与安全分发的问题,基于层次树和代理重签名提出了一个支持云存储中群组成员动态的隐私保护公开审计方案.提出的方案首次使用基于逻辑层次密钥体系的密钥树进行密钥的建立和分发,并引入密钥服务器对密钥进行存储,每个用户只需持有叶子节点,成员撤销及加入与原有有效用户获取新群私钥是相互独立的.发生用户撤销后,其余合法用户仍可以根据所持密钥获取新的群私钥,大大提高了用户动态的效率.性能分析结果表明:该方案是安全且高效的.

As the rapid development of cloud storage,it is important to protect the security of shared data in cloud.Therefore,it is necessary to protect users'privacy and verify the integrity of data efficiently during the data sharing.As the existing schemes consider little about the management and secure distribution of key,based on hierarchy tree and proxy re-signature,aprivacy-preserving public auditing scheme which supports dynamic group in cloud storage is supposed.The proposed scheme firstly uses logical hierarchy key tree to establish and distribute keys,and a key server is utilized to store keys.The revocation of user is independent from users'obtaining new group secret key as each user only stores the leaf node key.When a user revokes,the valid user can obtain the new group secret key with their original keys.Therefore,the scheme is more efficient for dynamic group.The security analysis and performance analysis show that the scheme is secure and efficient.