格上基于身份的云存储完整性检测方案

doi:10.11959/j.issn.1000-436x.2019073

通信学报 ›› 2019, Vol. 40 ›› Issue (4): 128-139.doi: 10.11959/j.issn.1000-436x.2019073

格上基于身份的云存储完整性检测方案

田苗苗¹,高闯¹,陈洁²

¹ 安徽大学计算机科学与技术学院，安徽合肥 230601
² 华东师范大学计算机科学与软件工程学院，上海 200062

修回日期:2019-01-11 出版日期:2019-04-25 发布日期:2019-05-05
作者简介:田苗苗（1987– ），男，安徽阜阳人，博士，安徽大学副教授，主要研究方向为密码学与信息安全。|高闯（1994– ），男，河南长垣人，安徽大学硕士生，主要研究方向为密码学与信息安全。|陈洁（1985– ），男，江苏苏州人，博士，华东师范大学研究员，主要研究方向为密码学与信息安全。
基金资助:
国家自然科学基金资助项目(61502443);国家自然科学基金资助项目(61772001);国家自然科学基金资助项目(61472142);国家自然科学基金资助项目(U1705264)

Identity-based cloud storage integrity checking from lattices

Miaomiao TIAN¹,Chuang GAO¹,Jie CHEN²

¹ School of Computer Science and Technology,Anhui University,Hefei 230601,China
² School of Computer Science and Software Engineering,East China Normal University,Shanghai 200062,China

Revised:2019-01-11 Online:2019-04-25 Published:2019-05-05
Supported by:
The National Natural Science Foundation of China(61502443);The National Natural Science Foundation of China(61772001);The National Natural Science Foundation of China(61472142);The National Natural Science Foundation of China(U1705264)

摘要/Abstract

摘要：

随着云存储的快速发展，越来越多的用户将数据存储在云端。为了验证云端的用户数据是否损坏，一种有效的方法是采用云存储完整性检测方案。利用理想格上的小整数解问题，设计了一种基于身份的云存储完整性检测方案，并在随机预言模型下证明了所提方案可以抵抗云服务器的适应性选择身份攻击。为了验证方案的效率，通过实验将所提方案与现有的2种基于身份的云存储完整性检测方案分别进行了比较。实验结果显示，所提方案的标签在线生成时间降低了88.32%～93.74%，证据验证时间降低了98.81%～99.73%。

关键词: 格, 基于身份的密码学, 云存储, 完整性检测

Abstract:

With the rapid development of cloud storage,more and more users are storing their data in the cloud.To verify whether the users’ data stored in the cloud is corrupted,one effective method is to adopt cloud storage integrity checking schemes.An identity-based cloud storage integrity checking scheme was proposed on the small integer solution problem over ideal lattices,and it was proven to be secure against the adaptive identity attacks of clouds in the random oracle model.To validate the efficiency of the scheme,extensive experiments were conducted to make performance-comparisons between the scheme and the existing two identity-based cloud storage integrity checking schemes.The experimental results show that the online tag-generation time and the proof-verification time of the scheme are respectively reduced by 88.32%～93.74% and 98.81%～99.73%.

Key words: lattice, identity-based cryptography, cloud storage, integrity checking

中图分类号:

TP309

田苗苗,高闯,陈洁. 格上基于身份的云存储完整性检测方案[J]. 通信学报, 2019, 40(4): 128-139.

Miaomiao TIAN,Chuang GAO,Jie CHEN. Identity-based cloud storage integrity checking from lattices[J]. Journal on Communications, 2019, 40(4): 128-139.

图/表 12

图1

表1

表2

表3

表4

表5

图2

表6

表7

表8

表9

图3

参考文献 28

[1]	BABCOCK C . 9 worst cloud security threats[N]. 2014. .
[2]	ATENIESE G , BURNS R , CURTMOLA R ,et al. Provable data possession at untrusted stores[C]// ACM Conference on Computer and communications security. ACM, 2007: 598-609.
[3]	JUELS A , KALISKI JR B S . Pors:proofs of retrievability for large files[C]// ACM Conference on Computer and Communications Security. ACM, 2007: 584-597.
[4]	SHACHAM H , WATERS B . Compact proofs of retrievability[C]// International Conference on the Theory and Application of Cryptology and Information Security. Springer, 2008: 90-107.
[5]	WANG Q , WANG C , REN K ,et al. Enabling public auditability and data dynamics for storage security in cloud computing[J]. IEEE Transactions on Parallel and Distributed Systems, 2011,22(5): 847-859.
[6]	WANG C , CHOW S S M , WANG Q ,et al. Privacy-preserving public auditing for secure cloud storage[J]. IEEE Transactions on Computers, 2013,62(2): 362-375.
[7]	XU Y , DING R , CUI J ,et al. Intrusion-resilient public auditing protocol for data storage in cloud computing[C]// Australasian Conference on Information Security and Privacy. Springer, 2018: 399-416.
[8]	WANG H , WU Q , QIN B ,et al. Identity-based remote data possession checking in public clouds[J]. IET Information Security, 2014,8(2): 114-121.
[9]	YU Y , ZHANG Y , MU Y ,et al. Provably secure identity based provable data possession[C]// International Conference on Provable Security. Springer, 2015: 310-325.
[10]	TIAN M , YE S , ZHONG H ,et al. Identity-based proofs of storage with enhanced privacy[C]// International Conference on Algorithms and Architectures for Parallel Processing. Springer, 2018: 461-480.
[11]	SHAMIR A , . Identity-based cryptosystems and signature schemes[C]// Annual International Cryptology Conference. Springer, 1984: 47-53.
[12]	SHOR P W . Polynomial-time algorithms for prime factorization and discrete logarithms on a quantum computer[J]. SIAM Journal on Computing, 1997,26(5): 1484-1509.
[13]	REGEV O , . Lattice-based cryptography[C]// Annual International Cryptology Conference. Springer, 2006: 131-141.
[14]	XU W , FENG D , LIU J . Public verifiable proof of storage protocol from lattice assumption[C]// International Conference on Intelligent Control,Automatic Detection and High-End Equipment. IEEE, 2012: 133-137.
[15]	MICCIANCIO D , REGEV O . Worst-case to average-case reductions based on Gaussian measures[C]// Symposium on Foundations of Computer Science. IEEE, 2004: 372-381.
[16]	LIU H , CAO W . Public proof of cloud storage from lattice assumption[J]. Chinese Journal of Electronics, 2014,23(1): 186-190.
[17]	ZHANG X , XU C , ZHANG Y ,et al. Insecurity of a public proof of cloud storage from lattice assumption[J]. Chinese Journal of Electronics, 2017,26(1): 88-92.
[18]	LIU Z , LIAO Y , YANG X ,et al. Identity-based remote data integrity checking of cloud storage from lattices[C]// International Conference on Big Data Computing and Communications. IEEE, 2017: >128-135.
[19]	GORBUNOV S , VAIKUNTANATHAN V , WICHS D . Leveled fully homomorphic signatures from standard lattices[C]// Annual ACM Symposium on Theory of Computing. ACM, 2015: 469-477.
[20]	MICCIANCIO D , PEIKERT C . Trapdoors for lattices:simpler,tighter,faster,smaller[C]// Annual International Conference on the Theory and Applications of Cryptographic Techniques. Springer, 2012: 700-718.
[21]	DUCAS L , MICCIANCIO D . Improved short lattice signatures in the standard model[C]// Annual International Cryptology Conference. Springer, 2014: 335-352.
[22]	LYUBASHEVSKY V , MICCIANCIO D . Generalized compact knapsacks are collision resistant[C]// International Colloquium on Automata,Languages,and Programming. Springer, 2006: 144-155.
[23]	PEIKERT C , ROSEN A . Efficient collision-resistant hashing from worst-case assumptions on cyclic lattices[C]// Theory of Cryptography Conference. Springer, 2006: 145-166.
[24]	REGEV O . New lattice-based cryptographic constructions[J]. Journal of the ACM, 2004,51(6): 899-942.
[25]	GENTRY C , PEIKERT C , VAIKUNTANATHAN V . Trapdoors for hard lattices and new cryptographic constructions[C]// Annual ACM Symposium on Theory of Computing. ACM, 2008: 197-206.
[26]	AGUILAR-MELCHOR C , BARRIER J , GUELTON S ,et al. NFLlib:NTT-based fast lattice library[C]// Cryptographers’ Track at the RSA Conference. Springer, 2016: 341-356.
[27]	GENISE N , MICCIANCIO D . Faster gaussian sampling for trapdoor lattices with arbitrary modulus[C]// Annual International Conference on the Theory and Applications of Cryptographic Techniques. Springer, 2018: 174-203.
[28]	RUCKERT M , SCHNEIDER M . Estimating the Security of Lattice-based Cryptosystems[J].,2010,20101006:091355. IACR Cryptology ePrint Archive, 2010,20101006:091355.

n	q	p	k	m	d	σ
128	≈2⁶²	2	62	188	128	4.41

方案	系统公钥/KB	用户私钥/KB	块标签/KB
IBRDICL方案	31 496.00	203 112.00	67.56
本文方案	246.06	1 708.88	70.50

方案	挑战/KB	证据/KB
IBRDICL方案	0.84	112.00
本文方案	0.84	114.94

方案	系统建立算法/ms	密钥提取算法/ms	审计算法/ms	证据生成算法/ms	证据验证算法/ms
IBRDICL方案	171 893.66	553 469.70	0.02	11.32	215.16
本文方案	16.35	1816.45	0.02	49.04	2.57

n	q	p	k	m	d	σ
512	≈2⁶²	2	62	188	64	4.46

格上基于身份的云存储完整性检测方案

Identity-based cloud storage integrity checking from lattices

在线阅读

PDF下载

可视化

摘要/Abstract

引用本文

使用本文

图/表 12

参考文献 28

相关文章 15

Metrics

推荐阅读 0

方案	基于身份	随机预言模型	顽健性	困难假设
IBPDP方案	是	是	是	CDH
IBRDICL方案	是	是	否	SIS
本文方案	是	是	是	Ring-SIS

方案	系统参数/KB	用户私钥/KB	块标签/KB
IBPDP方案	0.38	0.13	0.13
本文方案	736.25	7323.75	305.50

方案	系统建立算法/ms	私钥提取算法/ms	审计算法/ms	证据生成算法/ms	证据验证算法/ms
IBPDP方案	3.04	4.03	117.18	561.66	2 038.46
本文方案	46.43	1 039.70	0.02	131.63	5.50

[1]	陈晓玉, 孙连峰, 张钇涵. 具有大零相关区宽度的Ⅱ型偶长Z-互补对构造方法[J]. 通信学报, 2023, 44(6): 167-174.
[2]	哈冠雄, 贾巧雯, 陈杭, 贾春福. 无第三方服务器的基于数据流行度的加密去重方案[J]. 通信学报, 2022, 43(8): 17-29.
[3]	廉欢欢, 侯慧莹, 赵运磊. 后量子基于验证元的三方口令认证密钥交换协议[J]. 通信学报, 2022, 43(4): 95-106.
[4]	曹阳, 钟烨, 彭醇陵, 彭小峰. 基于混合供能和能量协作的异构网络能量效率优化算法[J]. 通信学报, 2022, 43(3): 135-147.
[5]	毛伊敏, 甘德瑾, 廖列法, 陈志刚. 基于Spark框架和ASPSO的并行划分聚类算法[J]. 通信学报, 2022, 43(3): 148-163.
[6]	郭渊博, 尹安琪. 基于格的口令认证密钥交换协议综述[J]. 通信学报, 2022, 43(12): 172-187.
[7]	郭红伟, 朱策, 杨栩, 罗雷. 基于失真反向传播的时域依赖率失真优化[J]. 通信学报, 2022, 43(12): 222-232.
[8]	董有恒, 赵耿, 马英杰. 基于分区初等元胞自动机的二维伪随机耦合映像格系统及其动态特性[J]. 通信学报, 2022, 43(1): 71-82.
[9]	冯涛, 孔繁琪, 柳春岩, 马蓉, Maher Albettar. 基于区块链的双重可验证云存储方案[J]. 通信学报, 2021, 42(12): 192-201.
[10]	贾春福, 哈冠雄, 武少强, 陈杭, 李瑞琪. 加密去重场景下基于AONT和NTRU的密钥更新方案[J]. 通信学报, 2021, 42(10): 67-80.
[11]	田苗苗, 陈静, 仲红. 格上基于身份的增量签名方案[J]. 通信学报, 2021, 42(1): 108-117.
[12]	王宏禹,邱天爽. 特征算子谱表示与特征展开的研究[J]. 通信学报, 2020, 41(5): 1-8.
[13]	田俊峰,王彦骉,何欣枫,张俊涛,杨万贺,庞亚南. 数据因果一致性研究综述[J]. 通信学报, 2020, 41(3): 154-167.
[14]	柯文龙,王勇,叶苗,陈俊奇. Ceph云存储网络中一种业务优先级区分的多播流调度方法[J]. 通信学报, 2020, 41(11): 40-51.
[15]	房礼国,付正欣,胡浩,沈刚,郁滨. 基于区域递增式彩色视觉密码的栅格地图多级分存算法研究[J]. 通信学报, 2019, 40(9): 24-32.