Analysis of Secured Cloud Data Storage Model for Information

This paper was motivated by the existing problems of Cloud Data storage in Imo State University, Nigeria such as outsourced data causing the loss of data and misuse of customer information by unauthorized users or hackers, thereby making customer/client data visible and unprotected. Also, this led to enormous risk of the clients/customers due to defective equipment, bugs, faulty servers, and specious actions. The aim if this paper therefore is to analyze a secure model using Unicode Transformation Format (UTF) base 64 algorithms for storage of data in cloud securely. The methodology used was Object Orientated Hypermedia Analysis and Design Methodology (OOHADM) was adopted. Python was used to develop the security model;the role-based access control (RBAC) and multi-factor authentication (MFA) to enhance security Algorithm were integrated into the Information System developed with HTML 5, JavaScript, Cascading Style Sheet (CSS) version 3 and PHP7. This paper also discussed some of the following concepts;Development of Computing in Cloud, Characteristics of computing, Cloud deployment Model, Cloud Service Models, etc. The results showed that the proposed enhanced security model for information systems of cooperate platform handled multiple authorization and authentication menace, that only one login page will direct all login requests of the different modules to one Single Sign On Server (SSOS). This will in turn redirect users to their requested resources/module when authenticated, leveraging on the Geo-location integration for physical location validation. The emergence of this newly developed system will solve the shortcomings of the existing systems and reduce time and resources incurred while using the existing system.

NC-MACPABE: Non-centered multi-authority proxy re-encryption based on CP-ABE for cloud storage systems

The cloud storage service cannot be completely trusted because of the separation of data management and ownership, leading to the difficulty of data privacy protection. In order to protect the privacy of data on untrusted servers of cloud storage, a novel multi-authority access control scheme without a trustworthy central authority has been proposed based on CP-ABE for cloud storage systems, called non-centered multi-authority proxy re-encryption based on the cipher-text policy attribute-based encryption(NC-MACPABE). NC-MACPABE optimizes the weighted access structure(WAS) allowing different levels of operation on the same file in cloud storage system. The concept of identity dyeing is introduced to improve the users' information privacy further. The re-encryption algorithm is improved in the scheme so that the data owner can revoke user's access right in a more flexible way. The scheme is proved to be secure. And the experimental results also show that removing the central authority can resolve the existing performance bottleneck in the multi-authority architecture with a central authority, which significantly improves user experience when a large number of users apply for accesses to the cloud storage system at the same time.

Multi-authority proxy re-encryption based on CPABE for cloud storage systems

The dissociation between data management and data ownership makes it difficult to protect data security and privacy in cloud storage systems.Traditional encryption technologies are not suitable for data protection in cloud storage systems.A novel multi-authority proxy re-encryption mechanism based on ciphertext-policy attribute-based encryption（MPRE-CPABE） is proposed for cloud storage systems.MPRE-CPABE requires data owner to split each file into two blocks,one big block and one small block.The small block is used to encrypt the big one as the private key,and then the encrypted big block will be uploaded to the cloud storage system.Even if the uploaded big block of file is stolen,illegal users cannot get the complete information of the file easily.Ciphertext-policy attribute-based encryption（CPABE）is always criticized for its heavy overload and insecure issues when distributing keys or revoking user＇s access right.MPRE-CPABE applies CPABE to the multi-authority cloud storage system,and solves the above issues.The weighted access structure（WAS） is proposed to support a variety of fine-grained threshold access control policy in multi-authority environments,and reduce the computational cost of key distribution.Meanwhile,MPRE-CPABE uses proxy re-encryption to reduce the computational cost of access revocation.Experiments are implemented on platforms of Ubuntu and CloudSim.Experimental results show that MPRE-CPABE can greatly reduce the computational cost of the generation of key components and the revocation of user＇s access right.MPRE-CPABE is also proved secure under the security model of decisional bilinear Diffie-Hellman（DBDH）.

Adaptive and Dynamic Mobile Phone Data Encryption Method

To enhance the security of user data in the clouds,we present an adaptive and dynamic data encryption method to encrypt user data in the mobile phone before it is uploaded.Firstly,the adopted data encryption algorithm is not static and uniform.For each encryption,this algorithm is adaptively and dynamically selected from the algorithm set in the mobile phone encryption system.From the mobile phone's character,the detail encryption algorithm selection strategy is confirmed based on the user's mobile phone hardware information,personalization information and a pseudo-random number.Secondly,the data is rearranged with a randomly selected start position in the data before being encrypted.The start position's randomness makes the mobile phone data encryption safer.Thirdly,the rearranged data is encrypted by the selected algorithm and generated key.Finally,the analysis shows this method possesses the higher security because the more dynamics and randomness are adaptively added into the encryption process.

VRS-DB:preserve confidentiality of users'data using encryption approach

We focus on security and privacy problems within a cloud database framework,exploiting the DataBase as a Service(DBaaS).In this framework,an information proprietor drives out its information to a cloud database professional company.The Data-Owner(DO)encrypts the delicate information before transmission at the cloud database professional company end to offer information security.Current encryption ideas,nonetheless,are just halfway homomorphic as all of them intend to enable an explicit kind of calculation,which is accomplished on scrambled information.These current plans can't be coordinated to solve genuine functional queries that include activities of various types.We propose and evaluate a Verifiable Reliable Secure-DataBase(VRS-DB)framework on shared tables along with many primary operations on scrambled information,which enables information interoperability,and permits an extensive possibility of Structured Query Language(SQL)queries to be prepared by the service provider on the encoded data.We show that our security and privacy idea is protected from two forms of threats and are fundamentally proficient.

MAVP-FE:Multi-Authority Vector Policy Functional Encryption with Efficient Encryption and Decryption

In cloud,data access control is a crucial way to ensure data security.Functional encryption(FE) is a novel cryptographic primitive supporting fine-grained access control of encrypted data in cloud.In FE,every ciphertext is specified with an access policy,a decryptor can access the data if and only if his secret key matches with the access policy.However,the FE cannot be directly applied to construct access control scheme due to the exposure of the access policy which may contain sensitive information.In this paper,we deal with the policy privacy issue and present a mechanism named multi-authority vector policy(MAVP) which provides hidden and expressive access policy for FE.Firstly,each access policy is encoded as a matrix and decryptors can only obtain the matched result from the matrix in MAVP.Then,we design a novel function encryption scheme based on the multi-authority spatial policy(MAVPFE),which can support privacy-preserving yet non-monotone access policy.Moreover,we greatly improve the efficiency of encryption and decryption in MAVP-FE by shifting the major computation of clients to the outsourced server.Finally,the security and performance analysis show that our MAVP-FE is secure and efficient in practice.

云存储与区块链相结合的电子数据共享模型研究

为解决公安局、检察院、法院及其他司法单位间电子数据共享中存在的低共享程度、安全性不足以及业务协同效率低下等问题,综合运用云存储、区块链、非对称加密、密文可搜索和代理重加密等技术,提出了一种云存储技术与联盟区块链技术相结合的电子数据共享模型。通过理论分析和模型构建,表明该模型能够在公检法等司法单位之间实现电子数据的高效、安全可靠和可溯源共享,从而提高了司法协同效率,而且为司法领域的数字化改革提供了理论基础和技术框架,对推动司法工作的数字化转型具有重要的理论和实践意义。

一种基于Fabric区块链的云端数据动态访问控制方案

【目的】云端存储数据的安全性是用户使用云存储服务的重要条件,一般用户与云服务提供商之间需要相互信任,而中心化的云服务器存在单点故障问题并且云端的数据存在泄露、丢失的风险。【方法】为解决上述问题,提出了一种基于Fabric区块链的云端数据动态访问控制方案。【结果】方案利用区块链难以篡改的特性解决了用户与云端的信任问题,使用去中心化云存储解决了云服务器的单点故障问题,利用智能合约实现了方案的自动执行,并采用属性基加密的方式实现了对云端数据的动态访问控制。【结论】通过对方案的安全分析与实验验证,方案具有良好的安全性与可用性。

身份加密多云多副本完整性审计协议

为解决现有可证明数据持有(PDP)协议只适用于单云存储服务器且过度依赖公钥基础设施的问题,提出一种新的基于身份的多云多副本PDP协议。该协议采用身份加密来简化证书管理,并设计双层默克尔哈希树作为新的安全数据结构,以维护多副本的新鲜性和一致性。安全性分析和实验结果均验证了该协议具备安全性和高效性,能够在多个云存储服务器上实现多副本完整性审计,并在标签生成、证据生成和证据验证3个阶段的效率上明显优于对比算法。

基于Fabric和属性加密的数据安全共享方案

为了解决弱信任组织之间数据共享问题,提出一种基于Hyperledger Fabric及密文策略属性加密的数据安全共享方案。首先,将密文策略属性加密技术融入Fabric区块链,实现证书、属性密钥及数据加密的集成;其次,基于云存储服务器构建云存储索引结构及数据存储体系,以支持数据高效存储及检索;最后,设计基于上述技术的Fabric数据访问控制方案,实现云存储数据安全共享。Fabric区块链的引入确保了数据可追溯性,改造的Fabric CA提高了系统可用性及数据共享效率。安全性分析及实验结果表明,该方案能够平衡数据共享效率、安全性及系统可用性,可实现弱信任组织之间数据的安全共享。

基于NTRU格的云平台数据属性自动化加密技术

当前加密技术应用效果不佳,故设计了一种基于NTRU格的云平台数据属性自动化加密技术。先从采集的云平台数据中获取数据属性,对数据属性进行预处理,然后通过计算数据属性的信息增益并对其进行分类处理,利用NTRU格构建相应的数据属性加密结构,并对加密结构的加密结果进行验证,最后利用加密结构生成随机序列,对其进行编码处理,再对数据编码进行融合,计算相应的加密参数,实现数据属性的自动化加密。在实验测试中,设计的基于NTRU格的云平台数据属性自动化加密技术加密时间仅为2.02 s,应用效果较好。

基于混合云架构的分布式协同信息共享平台设计

随着云环境的日趋复杂和信息分享需求的日益增大,设计了一种基于混合云架构的分布式协同信息共享平台。设计公、私有云混合环境下的信息共享平台的各项功能,通过定义共享平台数据的敏感度、空间饱和度以及访问频率等参数,为数据选择合适的存储位置;采用新型数据命名规则,将不同数据命名为一级数据或多级数据,从而实现共享数据的高效分发;还设计一种改进型公私钥双重加密技术,保护共享平台的数据安全,通过建立加密秘钥、权限矩阵和服务器密文三种加密数据,并与云共享平台再度结合产生重加密密文,实现指定用户的指定数据安全共享。经过试验验证,设计的分布式协同信息共享平台在数据存储、数据传输与数据安全方面均有较高的性能。

EMCA:一种新的多云存储中高效的多副本审计方案

云数据审计是一项允许数据所有者在不下载数据的情况下检查数据是否在远程云服务器上完整存储的技术。目前,云数据审计可分为单副本审计和多副本审计,针对多副本审计方案中计算开销大以及无法审计多云存储数据的不足,提出了一种在多云情景下高效的多副本云数据审计方案。所提方案使用较轻量级的模幂加密技术代替传统上计算成本较高的双线性配对技术,以降低在审计过程中的计算开销,提高了方案的效率。为每个副本数据块生成一个同态验证标签(HVT)作为元数据,当用户发出审计要求,每个云服务提供商生成对应的证据,由云服务器管理者聚合证据,实现了在多云存储中的审计。安全分析表明,所提方案可抵挡恶意云服务提供商的伪造攻击,以及恶意云服务提供商与第三方审计者的合谋攻击。性能分析表明,所提方案在计算开销上低于现有多副本审计方案,实现了高效的多云存储多副本审计。

Searchable Encryption System for Big Data Storage

Big data cloud platforms provide users with on-demand configurable computing,storage resources to users,thus involving a large amount of user data.However,most of the data is processed and stored in plaintext,resulting in data leakage.At the same time,simple encrypted storage ensures the confidentiality of the cloud data,but has the following problems:if the encrypted data is downloaded to the client and then decrypted,the search efficiency will be low.If the encrypted data is decrypted and searched on the server side,the security will be reduced.Data availability is finally reduced,and indiscriminate protection measures make the risk of data leakage uncontrollable.To solve the problems,based on searchable encryption and key derivation,a cipher search system is designed in this paper considering both data security and availability,and the use of a search encryption algorithm that supports dynamic update is listed.Moreover,the system structure has the advantage of adapting different searchable encryption algorithm.In particular,a user-centered key derivation mechanism is designed to realize file-level fine-grained encryption.Finally,extensive experiment and analysis show that the scheme greatly improves the data security of big data platform.

基于云平台的企业远程办公文件分布式存储方法

为提高数据的读写性能,设计基于云平台的企业远程办公文件分布式存储方法。总体架构由计算层、数据接入层、存储层、数据聚集层构成。存储层由Hadoop集群构成,各集群由NameNode管理;计算层与数据接入层可以实现数据的持久化存储;数据聚集层采用一致性多副本哈希存储算法作为数据聚集算法。通过搭建虚拟化云平台统一管理多个服务器,创建主机虚拟集群。设计文件加解密过滤器进行数据加解密。设计随机化数据冗余算法进行数据冗余。测试结果表明设计方法的集群负载情况良好,读、写带宽最高达到3798 bps和3912 bps,读、写速率最高达到3298字节/s和3258字节/s。

智慧保护地管理云平台系统设计与研究

针对保护地数据收集较为困难、管理云平台的利用普遍低下等问题,对智慧保护地管理云平台系统进行设计与研究。采用分布式系统对智慧保护地管理云平台进行设计,其结构可分为感知层、网络层和应用层。感知层主要采用无人机遥感技术实现对保护地数据的采集;网络层在窄带物联网技术上增加一个定时节能模块,可在对采集到的信息传送时节省功耗;应用层主要是对数据存储进行设计,可避免产生冗余重复数据,节省数据空间,增强索引能力和响应速度。通过试验,验证了数据采集的完整度和帧图像分辨率的稳定性都较传统方法更为优越。管理云平台数据存储占用空间较传统方法少,且随着数据量的增加,增长幅度更为均匀。

云平台下海量电力突发性数据自动储存技术研究

在海量电力突发性数据自动储存中,数据量无法达到规定阈值,储存执行时间过长,储存加速度比较低。为了解决上述问题,在云平台下研究了一种新的海量电力突发性数据自动储存技术。利用边缘层、基础层、平台层和应用层建立云平台架构,通过自动储存算法计算选择频率,根据染噪信息获得原始信号最终分解结果,实现突发性数据自动储存。实验结果表明,所研究储存技术能够较好地提高储存数据量,降低执行时间,储存加速度比能够达到17,具有较好的储存能力。

多源异构数据统一存储共享管理系统

大数据环境下,基于多源异构的专业数据,针对数据存储与共享管理业务,对多源异构数据统一存储共享系统及其功能组成进行了梳理,设计了一种面向文本、图片、专业领域数据等多源异构数据的跨模态统一存储与共享访问系统架构。采用分布式异构数据存储技术、数据模型管理技术,集数据获取、数据准备、可视化分析、数据共享与访问管理于一体,实现多源异构数据的统一存储与共享,并对系统的存储与访问性能进行评估分析,具备较高的稳定性和可靠性。验证了系统的实用性,从而达到了更好地为业务应用赋能,强力支撑各类应用开发的目的,具有广泛的适用性。

云计算技术在计算机网络安全存储中的实施路径探析

随着信息技术的飞速发展,计算机网络存储的规模和复杂性显著增加,相应的,网络安全存储问题也变得更为严峻。在这一背景下,云计算技术作为一项先进的解决方案备受关注。基于此,深入探讨云计算技术在计算机网络安全存储中的实施路径,从而为解决当前网络存储面临的诸多挑战提供新的思路和方法。同时,对推动云计算技术在计算机网络安全存储中的进步具有积极意义。通过对云计算技术的深入研究和应用,有望有效应对计算机网络存储面临的各种挑战,提高信息安全水平,推动数字化时代计算机网络存储领域的发展。

基于改进加密算法的云计算用户数据安全保护方法

当前方法对云计算用户数据保护时,以统一函数定义数据输入和输出,无法确保针对每种攻击的多样性描述,导致云计算用户数据安全性系数低的问题。对此,引入改进加密算法,开展云计算用户数据安全保护方法研究。利用改进加密算法,对用户身份认证;利用多个函数,定义输入和输出,实现云计算用户可验证静态数据存储;优化并合理限制Privilege Closure执行,实现云计算用户动态数据安全保护。对比实验证明:新的保护方法可以应对多种云计算用户数据攻击,保护数据安全,提高数据安全性系数。