面向云存储的双重数据完整性验证方案

Dual Data Integrity Verification Scheme for Cloud Storage

为解决云存储中可能存在的数据损坏、数据丢失等安全性问题,本文通过借鉴并改进目前云数据完整性验证的相关方案,弥补了传统方案中的不足,提出了面向云存储的双重数据完整性验证方案对共享数据位置和内容进行完整性验证.方案基于Merkle树设计了一种新的存储结构来实现哈希路径的快速生成,以减少位置完整性验证的时间开销;同时借助区块链来存储完整性验证数据和验证结果,并使用智能合约来代替第三方审计者执行完整性验证任务,保证完整性验证的自动化执行,增加完整性验证方案的可信度.安全性分析和实验分析表明该方案不仅能够保证共享数据的安全性,还可以高效地完成对共享数据的批量完整性验证.

In order to solve the possible data corruption,data loss and other security problems in cloud storage,this paper makes up for the deficiencies in the traditional scheme by drawing on and improving the current cloud data integrity verification scheme,and proposes a dual data integrity verification scheme for cloud storage to verify the integrity of the shared data location and content.The scheme designs a new storage structure based on Merkle tree to realize the fast generation of hash paths to reduce the time overhead of location integrity verification;meanwhile,with the help of blockchain to store the integrity verification data and verification results,and uses smart contracts to replace the third-party auditor to perform the integrity verification task,to ensure the automated execution of the integrity verification,and to increase the credibility of the integrity verification scheme.Security analysis and experimental analysis show that the scheme can not only ensure the security of shared data,but also efficiently complete the batch integrity verification of shared data.