基于区块链的双重可验证云存储方案

doi:10.11959/j.issn.1000-436x.2021225

通信学报 ›› 2021, Vol. 42 ›› Issue (12): 192-201.doi: 10.11959/j.issn.1000-436x.2021225

所属专题：区块链

基于区块链的双重可验证云存储方案

冯涛¹, 孔繁琪¹, 柳春岩², 马蓉¹, Maher Albettar¹

¹ 兰州理工大学计算机与通信学院，甘肃兰州 730050
² 兰州理工大学经济与管理学院，甘肃兰州 730050
³ 康考迪亚大学康考迪亚信息系统工程研究所，蒙特利尔 H3G 1M8

修回日期:2021-10-08 出版日期:2021-12-01 发布日期:2021-12-01
作者简介:冯涛（1970- ），男，甘肃临洮人，博士，兰州理工大学研究员、博士生导师，主要研究方向为网络与信息安全、区块链、工业互联网等
孔繁琪（1994- ），女，满族，辽宁沈阳人，兰州理工大学硕士生，主要研究方向为网络与信息安全、区块链、可验证计算等
柳春岩（1971- ），女，甘肃永靖人，兰州理工大学硕士生导师，主要研究方向为供应链管理等
马蓉（1992- ），女，甘肃兰州人，兰州理工大学博士生，主要研究方向为工业物联网中的安全多方计算和隐私保护等
Maher Albettar（1989- ），男，康考迪亚大学教授，主要研究方向为系统安全集成、建模、物联网和云计算
基金资助:
国家自然科学基金资助项目(62162039);国家自然科学基金资助项目(61762060);甘肃省科技厅重点研发计划基金资助项目(20YF3GA016)

Dual verifiable cloud storage scheme based on blockchain

Tao FENG¹, Fanqi KONG¹, Chunyan LIU², Rong MA¹, Albettar Maher¹

¹ School of Computer and Communication， Lanzhou University of Technology， Lanzhou 730050， China
² School of Economics and Management， Lanzhou University of Technology， Lanzhou 730050， China
³ Concordia Institute for Information Systems Engineering， Concordia University， Montréal H3G 1M8， Canada

Revised:2021-10-08 Online:2021-12-01 Published:2021-12-01
Supported by:
The National Natural Science Foundation of China(62162039);The National Natural Science Foundation of China(61762060);The Key Research and De-velopment Program of Gansu Province(20YF3GA016)

摘要/Abstract

摘要：

针对工业物联网（IIoT）中，工业设备将数据存储到云端，导致数据易被篡改且无法追踪恶意用户，引起恶性循环的问题，借助区块链的可溯源性和不可篡改性等特点，提出了一种基于区块链的双重可验证云存储方案。首先，使用同态加密技术加密数据并上传至云端，确保传输安全性，实现数据的隐私保护；其次，将聚合密文和上传者信息存储在区块链上，有效避免数据被非法用户篡改的风险，并能对恶意用户进行追溯，实现对云端数据完整性的双重验证；最后，进行安全性分析，证明所提方案比同类方案更加安全可靠。

关键词: 区块链, 可验证计算, 隐私保护, 云存储

Abstract:

In response to the problem that in the industrial Internet of things （IIoT）， industrial equipment stored data in the cloud， causing data to be easily tampered with and unable to track malicious users， causing a vicious circle， with the help of the traceability and immutability of the blockchain， a dual verifiable cloud storage scheme based on the blockchain was proposed.Firstly， homomorphic encryption technology was used to encrypt data and upload it to the cloud ， which ensured transmission security and realized data privacy protection.Secondly， the aggregated ciphertext and uploader information were stored on the blockchain， which could effectively avoid the risk of data being tampered with by illegal users， and could trace malicious users to achieve double verification of cloud data integrity.Finally， a safety analysis was carried out to prove that the proposed scheme is safer and more reliable than similar schemes.

Key words: blockchain, verifiable calculation, privacy protection, cloud storage

中图分类号:

TP309

冯涛, 孔繁琪, 柳春岩, 马蓉, Maher Albettar. 基于区块链的双重可验证云存储方案[J]. 通信学报, 2021, 42(12): 192-201.

Tao FENG, Fanqi KONG, Chunyan LIU, Rong MA, Albettar Maher. Dual verifiable cloud storage scheme based on blockchain[J]. Journal on Communications, 2021, 42(12): 192-201.

图/表 5

图1

图2

表1

图3

表2

参考文献 21

[1]	YU Y , LIU S M , YEOH P L ,et al. LayerChain:a hierarchical edge-cloud blockchain for large-scale low-delay industrial Internet of Things applications[J]. IEEE Transactions on Industrial Informatics, 2021,17(7): 5077-5086.
[2]	LI H T , GUO F , WANG L L ,et al. A blockchain-based public auditing protocol with self-certified public keys for cloud data[J]. Security and Communication Networks, 2021,2021: 1-10.
[3]	薛锐, 吴迎, 刘牧华 ,等. 可验证计算研究进展[J]. 中国科学:信息科学, 2015,45(11): 1370-1388.
	XUE R , WU Y , LIU M H ,et al. Progress in verifiable computation[J]. Scientia Sinica (Informationis), 2015,45(11): 1370-1388.
[4]	NIGAM R , PATHAK R K , KUMAR A ,et al. PCP framework to expose malware in devices[C]// Proceedings of 2020 International Conference on Electronics and Sustainable Communication Systems (ICESC). Piscataway:IEEE Press, 2020: 1-6.
[5]	杨亚涛, 赵阳, 张卷美 ,等. 同态密码理论与应用进展[J]. 电子与信息学报, 2021(2): 475-487.
	YANG Y T , ZHAO Y , ZHANG J M ,et al. Recent development of theory and application on homomorphic encryption[J]. Journal of Electronics ＆ Information Technology, 2021(2): 475-487.
[6]	CHANG J Y , JI Y Y , SHAO B L ,et al. Certificateless homomorphic signature scheme for network coding[J]. IEEE/ACM Transactions on Networking, 2020,28(6): 2615-2628.
[7]	CHAUM D , PEDERSEN T . Wallet databases with observers[C]// Proceedings of Annual International Cryptology Conference. Berlin:Springer, 1993: 89-105.
[8]	LONE A H , NAAZ R . Demystifying cryptography behind blockchains and a vision for post-quantum blockchains[C]// Proceedings of 2020 IEEE International Conference for Innovation in Technology (INOCON). Piscataway:IEEE Press, 2020: 1-6.
[9]	WANG S P , ZHANG D , ZHANG Y L . Blockchain-based personal health records sharing scheme with data integrity verifiable[J]. IEEE Access, 2019,7: 102887-102901.
[10]	GUO Y , ZHANG C , JIA X H . Verifiable and forward-secure encrypted search using blockchain techniques[C]// Proceedings of ICC 2020 2020 IEEE International Conference on Communications (ICC). Piscataway:IEEE Press, 2020: 1-7.
[11]	GUO R , ZHUANG C Y , SHI H X ,et al. A lightweight verifiable outsourced decryption of attribute-based encryption scheme for blockchain-enabled wireless body area network in fog computing[J]. International Journal of Distributed Sensor Networks, 2020,16(2): 155014772090679.
[12]	DIMITRIOU T . Efficient,coercion-free and universally verifiable blockchain-based voting[J]. Computer Networks, 2020,174: 107234.
[13]	WANG S P , ZHANG Y L , ZHANG Y L . A blockchain-based framework for data sharing with fine-grained access control in decentralized storage systems[J]. IEEE Access, 2018,6: 38437-38450.
[14]	DORSALA M R , SASTRY V N , CHAPRAM S . Fair protocols for verifiable computations using bitcoin and Ethereum[C]// Proceedings of 2018 IEEE 11th International Conference on Cloud Computing (CLOUD). Piscataway:IEEE Press, 2018: 786-793.
[15]	ZHANG Y H , DENG R H , SHU J G ,et al. TKSE:trustworthy keyword search over encrypted data with two-side verifiability via blockchain[J]. IEEE Access, 2018,6: 31077-31087.
[16]	YAO H L , WANG C F , HAI B ,et al. Homomorphic hash and blockchain based authentication key exchange protocol for strangers[C]// Proceedings of 2018 Sixth International Conference on Advanced Cloud and Big Data (CBD). Piscataway:IEEE Press, 2018: 243-248.
[17]	REN W , TONG X , DU J ,et al. Privacy-preserving using homomorphic encryption in Mobile IoT systems[J]. Computer Communications, 2021,165: 105-111.
[18]	WANG C , CHOW S S M , WANG Q ,et al. Privacy-preserving public auditing for secure cloud storage[J]. IEEE Transactions on Computers, 2013,62(2): 362-375.
[19]	BUCCAFURRI F , LAX G , NICOLAZZ S ,et al. Range query integrity in cloud data streams with efficient insertion[C]// International Conference on Cryptology and Network Security. Cham:Springer International Publishing, 2016: 719-724.
[20]	武朵朵, 来齐齐, 杨波 . 矩阵乘积的高效可验证安全外包计算[J]. 密码学报, 2017,4(4): 322-332.
	WU D D , LAI Q Q , YANG B . Efficient,verifiable and secure outsourcing of matrix multiplication[J]. Journal of Cryptologic Research, 2017,4(4): 322-332.
[21]	SATHYA A , RAJA S K S . Privacy preservation-based access control intelligence for cloud data storage in smart healthcare infrastructure[J]. Wireless Personal Communications, 2021,118(4): 3595-3614.

验证类型	生成验证阶段	数据验证阶段
总体验证	2 H+（2Vc-1）M+VcE	VcH+（Vc+V）M+（Vc+V）E
单个验证	1H+（2 c-1）M+cE	（c+1）H+（c+1）M+（c+1）E

方案	云存储	可验证性	隐私性	可扩展性	抗共谋	区块链技术	可追溯
文献[9]方案	×	√	√	×	─	√	×
文献[12]方案	×	√	√	√	×	√	×
文献[19]方案	√	√	√	─	×	×	×
文献[20]方案	√	√	√	×	─	×	×
文献[21]方案	√	×	√	─	─	×	×
本文方案	√	√	√	√	√	√	√

基于区块链的双重可验证云存储方案

Dual verifiable cloud storage scheme based on blockchain

在线阅读

PDF下载

可视化

摘要/Abstract

引用本文

使用本文

图/表 5

参考文献 21

相关文章 15

Metrics

推荐阅读 0

[1]	马鑫迪, 李清华, 姜奇, 马卓, 高胜, 田有亮, 马建峰. 面向Non-IID数据的拜占庭鲁棒联邦学习[J]. 通信学报, 2023, 44(6): 138-153.
[2]	张海波, 曹钰坤, 刘开健, 王汝言. 车联网中基于区块链的分布式信任管理方案[J]. 通信学报, 2023, 44(5): 148-157.
[3]	刘雪娇, 钟强, 夏莹杰. 基于双层分片区块链的车联网跨信任域高效认证方案[J]. 通信学报, 2023, 44(5): 213-223.
[4]	冯涛, 陈李秋, 方君丽, 石建明. 基于本地化差分隐私和属性基可搜索加密的区块链数据共享方案[J]. 通信学报, 2023, 44(5): 224-233.
[5]	夏莹杰, 朱思雨, 刘雪娇. 区块链架构下具有条件隐私的车辆编队跨信任域高效群组认证研究[J]. 通信学报, 2023, 44(4): 111-123.
[6]	胡柏吉, 张晓娟, 李元诚, 赖荣鑫. 支持多功能的V2G网络隐私保护数据聚合方案[J]. 通信学报, 2023, 44(4): 187-200.
[7]	蒋丽, 谢胜利, 田辉. 面向数字孪生边缘网络的区块链分片及资源自适应优化机制[J]. 通信学报, 2023, 44(3): 12-23.
[8]	戴千一, 张斌, 郭松, 徐开勇. 基于多分类器集成的区块链网络层异常流量检测方法[J]. 通信学报, 2023, 44(3): 66-80.
[9]	经普杰, 王良民, 董学文, 张玉书, 王骞, Muhammad Sohail. 分层跨链结构：一种面向区块链系统监管的可行架构[J]. 通信学报, 2023, 44(3): 93-104.
[10]	徐明, 张保俊, 伍益明, 应晨铎, 郑宁. 面向网络攻击和隐私保护的多智能体系统分布式共识算法[J]. 通信学报, 2023, 44(3): 117-127.
[11]	刘雪娇, 曹天聪, 夏莹杰. 区块链架构下高效的车联网跨域数据安全共享研究[J]. 通信学报, 2023, 44(3): 186-197.
[12]	黄冬艳, 李琨. 多地址的时间型区块链隐蔽通信方法研究[J]. 通信学报, 2023, 44(2): 148-159.
[13]	余晟兴, 陈钟. 基于同态加密的高效安全联邦学习聚合框架[J]. 通信学报, 2023, 44(1): 14-28.
[14]	杨亚涛, 刘德莉, 刘培鹤, 曾萍, 肖嵩. BFV-Blockchainvoting：支持BFV全同态加密的区块链电子投票系统[J]. 通信学报, 2022, 43(9): 100-111.
[15]	冯霞, 崔凯平, 谢晴晴, 王良民. VANET中基于区块链的分布式匿名认证方案[J]. 通信学报, 2022, 43(9): 134-147.