适用于再生编码分布式存储的轻量型隐私保护审计方案

doi:10.11959/j.issn.1000-436x.2021116

通信学报 ›› 2021, Vol. 42 ›› Issue (7): 220-230.doi: 10.11959/j.issn.1000-436x.2021116

适用于再生编码分布式存储的轻量型隐私保护审计方案

刘光军¹, 郭网媚², 熊金波³, 刘西蒙⁴, 董长宇⁵

¹ 西安文理学院信息工程学院，陕西西安 710065
² 西安电子科技大学综合业务网理论及关键技术国家重点实验室，陕西西安 710071
³ 福建师范大学数学与信息学院，福建福州 350117
⁴ 福州大学数学与计算机科学学院，福建福州 350108
⁵ 英国纽卡斯尔大学计算机学院，纽卡斯尔 NE4 5TG

修回日期:2021-03-01 出版日期:2021-07-25 发布日期:2021-07-01
作者简介:刘光军（1980− ），男，安徽六安人，博士，西安文理学院副教授，主要研究方向为密码学与编码理论、网络编码、安全编码计算等
郭网媚（1984− ），女，陕西周至人，博士，西安电子科技大学副教授、博士生导师，主要研究方向为网络编码、无线通信等
熊金波（1981− ），男，湖南益阳人，博士，福建师范大学教授，主要研究方向为安全深度学习、移动群智感知、隐私保护技术等
刘西蒙（1988− ），男，陕西西安人，博士，福州大学研究员，主要研究方向为隐私计算、密文数据挖掘、大数据隐私保护、可搜索加密等
董长宇（1977− ），男，黑龙江齐齐哈尔人，博士，纽卡斯尔大学教授、博士生导师，主要研究方向为可搜索加密、隐私保护、人工智能安全等
基金资助:
国家自然科学基金资助项目(61872088);国家自然科学基金资助项目(U1905211);国家自然科学基金资助项目(62072109);国家自然科学基金资助项目(U1804263);福建省自然科学基金资助项目(2019J01276);陕西省自然科学基金资助项目(2021JQ-196);中国博士后基金资助项目(2019M663629);西安市科技计划资助项目(2020KJWL02)

Lightweight privacy protection data auditing scheme for regenerating-coding-based distributed storage

Guangjun LIU¹, Wangmei GUO², Jinbo XIONG³, Ximeng LIU⁴, Changyu DONG⁵

¹ School of Information Engineering, Xi’an University, Xi’an 710065, China
² State Key Laboratory of Integrated Services Networks, Xidian University, Xi’an 710071, China
³ College of Mathematics and Informatics, Fujian Normal University, Fuzhou 350117, China
⁴ College of Mathematics and Computer Science, Fuzhou University, Fuzhou 350108, China
⁵ School of Computing, Newcastle University, Newcastle NE4 5TG, UK

Revised:2021-03-01 Online:2021-07-25 Published:2021-07-01
Supported by:
The National Natural Science Foundation of China(61872088);The National Natural Science Foundation of China(U1905211);The National Natural Science Foundation of China(62072109);The National Natural Science Foundation of China(U1804263);The Natural Science Foundation of Fujian Province(2019J01276);The Natural Science Foundation of Shaanxi Province(2021JQ-196);The China Postdoctoral Science Foundation(2019M663629);The Xi’an Science and Technology Project(2020KJWL02)

摘要/Abstract

摘要：

为了降低面向再生编码分布式存储系统的外包数据审计机制的安全实现开销，提出了一种正交化代数编码方法，以此构造一类基于线性同态认证的轻量型隐私保护审计方案。利用文件编码数据与私有密钥向量的正交化构造外包存储向量的同态认证标签，并提出利用密钥特定分量的正交基向量组的随机化掩码来完成审计响应消息的隐私保护，实现代数编码、隐私保护和安全审计的高效融合。理论分析表明，所提方案在再生编码分布式存储应用中可实现信息理论意义下的安全性。与现有同类工作相比，该方案计算复杂度低，通信开销小，具有更好的性能优势。

关键词: 数据审计, 隐私保护, 再生码, 网络编码, 分布式存储

Abstract:

To reduce the security implementation cost of the outsourcing data audit mechanism for the regenerating-coding-based distributed storage systems, an orthogonal algebraic coding method was put forward to construct a lightweight privacy-preserving audit scheme based on linear homomorphic authentication.The homomorphic authentication tags were generated with the orthogonalization between the file encoded data and the private secret key vector, and the privacy protection of the auditing response message was achieved by using the random masking that was constructed by randomizing the orthogonal basis vectors of the specific sub-vector of the user’s secret key.The work realized the effective integration of algebraic coding, privacy protection, and security auditing.Theoretical analysis shows that the proposed scheme can realize the information-theoretic security in the regenerating-coding-based storage applications.Compared with the existing works, the proposed scheme is of low computational complexity and communication overhead, and better performance advantages.

Key words: data auditing, privacy protection, regenerating code, network coding, distributed storage

中图分类号:

TP309

刘光军, 郭网媚, 熊金波, 刘西蒙, 董长宇. 适用于再生编码分布式存储的轻量型隐私保护审计方案[J]. 通信学报, 2021, 42(7): 220-230.

Guangjun LIU, Wangmei GUO, Jinbo XIONG, Ximeng LIU, Changyu DONG. Lightweight privacy protection data auditing scheme for regenerating-coding-based distributed storage[J]. Journal on Communications, 2021, 42(7): 220-230.

图/表 7

图1

表1

参数符号表示"

参数	含义
m	用户文件数据向量的个数
n	用户文件数据向量的长度
$\tilde{n}$	系统中存储节点的个数
σ	用户文件在每个存储节点存储的消息向量个数
k	成功恢复文件时需要协作的存储节点最少个数
$y_{s j}$	$ℕ_{s}$ 中存储的第j个消息向量
$g_{y_{s j}}$	$y_{s j}$ 的随机编码向量
$κ_{e}$	用户与CSP的共享临时密钥
id, wid	外包存储文件和当前审计任务的唯一标识符
$\tilde{r}$	存储节点持有的密钥向量（长度为m+n+1）
$\bar{r}$	$\tilde{r}$ 的前n个元素组成的向量
$r$	$\tilde{r}$ 的前n+m个元素组成的向量
${\bar{p}}_{i}$	存储节点持有的第i个掩码向量（长度为n）

表1

图2

图3

表2

表3

表4

参考文献 28

[1]	NACHIAPPAN R , JAVADI B , CALHEIROS R N ,et al. Cloud storage reliability for big data applications:a state of the art survey[J]. Journal of Network and Computer Applications, 2017,97: 35-47.
[2]	BALAJI S B , KRISHNAN M N , VAJHA M ,et al. Erasure coding for distributed storage:an overview[J]. Science China Information Sciences, 2018,61(10): 1-45.
[3]	THAKUR N , SINGH A , SANGAL A L . Data integrity authentication techniques in cloud computing:a survey[C]// Soft Computing:Theories and Applications. Berlin:Springer, 2020: 1255-1267.
[4]	王意洁, 许方亮, 裴晓强 . 分布式存储中的纠删码容错技术研究[J]. 计算机学报, 2017(1): 236-255.
	WANG Y J , XU F L , PEI X Q . Research on error code-based fault-tolerant technology for distributed storage[J]. Chinese Journal of Computers, 2017(1): 236-255.
[5]	ZHOU L , FU A M , YU S ,et al. Data integrity verification of the outsourced big data in the cloud environment:a survey[J]. Journal of Network and Computer Applications, 2018,122: 1-15.
[6]	ARMKNECHT F , BOHLI J M , KARAME G ,et al. Outsourcing proofs of retrievability[J]. IEEE Transactions on Cloud Computing, 2021,9(1): 286-301.
[7]	WANG H Q , HE D B , FU A M ,et al. Provable data possession with outsourced data transfer[J]. IEEE Transactions on Services Computing, 2019,PP(99): 1.
[8]	TAN C B , HIJAZI M H A , LIM Y ,et al. A survey on proof of retrievability for cloud data integrity and availability:cloud storage state-of-the-art,issues,solutions and future trends[J]. Journal of Network and Computer Applications, 2018,110: 75-86.
[9]	HAHN C , KWON H , KIM D ,et al. Enabling fast public auditing and data dynamics in cloud services[J]. IEEE Transactions on Services Computing, 2020,PP(99): 1.
[10]	WANG C , CHOW S S M , WANG Q ,et al. Privacy-preserving public auditing for secure cloud storage[J]. IEEE Transactions on Computers, 2013,62(2): 362-375.
[11]	CHEN B , CURTMOLA R , ATENIESE G ,et al. Remote data checking for network coding-based distributed storage systems[C]// Proceedings of the 2010 ACM Workshop on Cloud computing Security Workshop. New York:ACM Press, 2010: 31-42.
[12]	CHEN H C H , LEE P P C . Enabling data integrity protection in regenerating-coding-based cloud storage:theory and implementation[J]. IEEE Transactions on Parallel and Distributed Systems, 2014,25(2): 407-416.
[13]	BOWERS K D , JUELS A , OPREA A . HAIL:a high-availability and integrity layer for cloud storage[C]// Proceedings of the 16th ACM Conference on Computer and Communications Security. New York:ACM Press, 2009: 187-198.
[14]	CHEN H C H , HU Y C , LEE P P C ,et al. NCCloud:a network-coding-based storage system in a cloud-of-clouds[J]. IEEE Transactions on Computers, 2014,63(1): 31-44.
[15]	HE K , HUANG C H , SHI J L ,et al. Public integrity auditing for dynamic regenerating code based cloud storage[C]// 2016 IEEE Symposium on Computers and Communication. Piscataway:IEEE Press, 2016: 581-588.
[16]	REN Z W , WANG L N , WANG Q ,et al. Dynamic proofs of retrievability for coded cloud storage systems[J]. IEEE Transactions on Services Computing, 2018,11(4): 685-698.
[17]	LIU J , HUANG K , RONG H ,et al. Privacy-preserving public auditing for regenerating-code-based cloud storage[J]. IEEE Transactions on Information Forensics and Security, 2015,10(7): 1513-1528.
[18]	LE A , MARKOPOULOU A , DIMAKIS A G . Auditing for distributed storage systems[J]. IEEE/ACM Transactions on Networking, 2016,24(4): 2182-2195.
[19]	VS L , PP D . A secure regenerating code-based cloud storage with efficient integrity verification[J]. International Journal of Communication Systems, 2019,32(9): e3948.
[20]	PAILLIER P , . Public-key cryptosystems based on composite degree residuosity classes[C]// International Conference on the Theory and Applications of Cryptographic Techniques. Berlin:Springer, 1999: 223-238.
[21]	CHILLOTTI I , GAMA N , GEORGIEVA M ,et al. TFHE:fast fully homomorphic encryption over the torus[J]. Journal of Cryptology, 2020,33(1): 34-91.
[22]	LIU M P , JIANG R , KONG H F . Cryptanalysis and countermeasures on privacy-preserving public auditing for regenerating-code-based cloud storage[C]// International Conference on Communication and Electronic Information Engineering. Dordrecht:Atlantis Press, 2016: 275-283.
[23]	陈越, 王龙江, 严新成 ,等. 基于再生码的拟态数据存储方案[J]. 通信学报, 2018,39(4): 21-34.
	CHEN Y , WANG L J , YAN X C ,et al. Mimic storage scheme based on regenerated code[J]. Journal on Communications, 2018,39(4): 21-34.
[24]	KRAWCZYK H , . New hash functions for message authentication[C]// International Conference on the Theory and Applications of Cryptographic Techniques. Berlin:Springer, 1995: 301-310.
[25]	LIANG W , FAN Y K , LI K C ,et al. Secure data storage and recovery in industrial blockchain network environments[J]. IEEE Transactions on Industrial Informatics, 2020,16(10): 6543-6552.
[26]	LIU G J , GUO W M , LIU X M ,et al. Security analysis and improvements on a remote integrity checking scheme for regenerating-coding-based distributed storage[J]. Security and Communication Networks, 2021,2021: 1-8.
[27]	COHEN A , D’OLIVEIRA R G L ,, SALAMATIAN S ,et al. Network coding-based post-quantum cryptography[J]. IEEE Journal on Selected Areas in Information Theory, 2021,2(1): 49-64.
[28]	KADHE S , SPRINTSON A . Weakly secure regenerating codes for distributed storage[C]// 2014 International Symposium on Network Coding. Piscataway:IEEE Press, 2014: 1-6.

方案名称	实现机制	审计安全	数据修复	隐私保护	审计通信量	TPA存储量	TPA计算量	CSP计算量
文献[10]方案	Public Key	Yes	No	Yes	m+n+2ξ+1	O(1)	Heavy	Heavy
文献[11]方案	Private Key	Yes	Yes	No	m+3ξ+mσ	O(1)	O(ξσ)	O(σ(ξ+m))
文献[17]方案	Public Key	Yes	Yes	No	m+3ξ	O(1)	Heavy	Heavy
文献[18]方案	Private Key	No	Yes	Yes	m+n+3ξ+3	O(mσ)	O(ξσ)	O(ξn+n²)
文献[19]方案	Private Key	Yes	Yes	Yes	m+n+3ξ+1	O(mσ)	O(nσ)	O(ξn)
本文方案	Private Key	Yes	Yes	Yes	m+n+3ξ+1	O(mσ)	O(ξσ)	O(ξn)

方案	ξ=250		ξ=350
方案	TPA/ms	CSP/ms	TPA/ms	CSP/ms
文献[11]方案	23.35	2.029	23.557	2.243
文献[17]方案	125.78	46.5	187.23	69.01
文献[18]方案	9.634	3.325	9.74	4.011
文献[19]方案	13.32	3.045	16.512	3.595
本文方案	9.631	2.99	9.735	3.107

方案	实现机制	安全编码时间开销/ms
文献[17]方案	Public Key	302.116
文献[18]方案	Private Key	19.209
文献[19]方案	Private Key	26.157
本文方案	Private Key	13.828

适用于再生编码分布式存储的轻量型隐私保护审计方案

Lightweight privacy protection data auditing scheme for regenerating-coding-based distributed storage

在线阅读

PDF下载

可视化

摘要/Abstract

引用本文

使用本文

图/表 7

参考文献 28

相关文章 15

Metrics

推荐阅读 0

[1]	马鑫迪, 李清华, 姜奇, 马卓, 高胜, 田有亮, 马建峰. 面向Non-IID数据的拜占庭鲁棒联邦学习[J]. 通信学报, 2023, 44(6): 138-153.
[2]	冯涛, 陈李秋, 方君丽, 石建明. 基于本地化差分隐私和属性基可搜索加密的区块链数据共享方案[J]. 通信学报, 2023, 44(5): 224-233.
[3]	夏莹杰, 朱思雨, 刘雪娇. 区块链架构下具有条件隐私的车辆编队跨信任域高效群组认证研究[J]. 通信学报, 2023, 44(4): 111-123.
[4]	胡柏吉, 张晓娟, 李元诚, 赖荣鑫. 支持多功能的V2G网络隐私保护数据聚合方案[J]. 通信学报, 2023, 44(4): 187-200.
[5]	徐明, 张保俊, 伍益明, 应晨铎, 郑宁. 面向网络攻击和隐私保护的多智能体系统分布式共识算法[J]. 通信学报, 2023, 44(3): 117-127.
[6]	田俊峰, 杨乾宇, Jitian Xiao. 基于偏向稳定的分布式审计因果一致性模型[J]. 通信学报, 2023, 44(3): 164-177.
[7]	余晟兴, 陈钟. 基于同态加密的高效安全联邦学习聚合框架[J]. 通信学报, 2023, 44(1): 14-28.
[8]	赖恪, 雷菁, 刘伟, 文磊. 基于网络编码的稀疏码分多址接入HARQ方案[J]. 通信学报, 2022, 43(9): 57-69.
[9]	张学旺, 黎志鸿, 林金朝. 基于公平盲签名和分级加密的联盟链隐私保护方案[J]. 通信学报, 2022, 43(8): 131-141.
[10]	王继锋, 王国峰. 边缘计算模式下密文搜索与共享技术研究[J]. 通信学报, 2022, 43(4): 227-238.
[11]	封化民, 史瑞, 袁峰, 李艳俊, 杨旸. 高效的强隐私保护和可转让的属性票据方案[J]. 通信学报, 2022, 43(3): 63-75.
[12]	于海宁, 张宏莉, 余翔湛, 曲家兴, 葛蒙蒙. 隐私保护的轨迹相似度计算方法[J]. 通信学报, 2022, 43(11): 1-13.
[13]	彭滔, 钟文韬, 王国军, 罗恩韬, 熊金波, 刘忆宁, Hao Wang. 移动社交网络中面向隐私保护的精确好友匹配[J]. 通信学报, 2022, 43(11): 90-103.
[14]	史瑞, 封化民, 谢惠琴, 史国振, 刘飚, 杨旸. 基于带智能卡的移动终端实现的隐私保护的属性票据方案[J]. 通信学报, 2022, 43(10): 26-41.
[15]	熊金波, 周永洁, 毕仁万, 万良, 田有亮. 边缘协同的轻量级隐私保护分类框架[J]. 通信学报, 2022, 43(1): 127-137.